Cyber Security Engineer

• Threat modeling and cybersecurity risk assessment of products
• Regulatory submissions for cybersecurity
• Vulnerability management including generating software bill of materials, vulnerability intake and disposition (signal sources: internal and external testing, CVEs), and risk assessment to products.
• Quality management for cybersecurity
• Cybersecurity risk assessment for manufacturing and development of products
• Incident response for products and non-products

• Ensure that risks to patient safety and privacy are acceptable by assessing, analyzing, dispositioning, and risk-managing product and non-product vulnerabilities.
• Read/understand/analyze the latest vulnerabilities as they are manifested diverse platforms---Android, iOS, cloud infrastructure, BLE (our products run on multiple platforms)
• Be accountable for meeting vulnerability disposition and analysis metrics
• Parse cybersecurity testing results for product teams.
• Design and document cybersecurity architectures.
• Assist in documentation for ramp-up, sustenance, maintenance and releases.
• Should be a to lead a technical team.
• Ability to work in a highly matrixed and geographically diverse business environment
• Strong verbal and written communications with ability to effectively communicate at multiple levels in the organization
• Multitasks, prioritizes and meets timelines.
• Strong organizational and follow-up skills, as well as attention to detail.
• Work with other functions (software, systems, clinical) to deliver business-critical functionality.
• Complies with U.S. Food and Drug Administration (FDA) regulations, other regulatory requirements, Company policies, operating procedures, processes, and task assignments.
• Maintains positive and cooperative communications and collaboration with all levels of employees, customers, contractors, and vendors.

• Bachelors Degree in Software engineering, computer science, or a related engineering field, or an equivalent combination of education and work experience
• At least 7 years of relevant experience with a bachelor’s degree in a related field or 5 years of relevant experience with a master’s degree in a related field
• Deep knowledge of software security (e.g. buffer overflow, ROP, code reverse engineering)
• Deep knowledge of operating systems (primarily Linux/Android)
• Knowledge of cryptography
• Ability to product high-quality documentation that can stand up to independent review
• Ownership of organizational capabilities and maintenance of quality metrics
• Ability to work in a highly matrixed and geographically diverse business environment
• Strong verbal and written communications with ability to effectively communicate at multiple levels in the organization
• Multitasks, prioritizes and meets deadlines in timely manner
• Strong organizational and follow-up skills, as well as attention to detail

• Knowledge of Bluetooth Low Energy security
• Knowledge of cloud security

Right Advisors