Product Security Engineer

Role: Product Security Engineer

Location: REMOTE

Duration: 6 month contract to likely hire or ongoing contract extensions

Location: Greater Hyderabad area will be remote but once converted they will need to go onsite once or a couple times a week but that is also flexible

Required Skills & Experience:

5 years experience in Software Security

MUST HAVE EXPERIENCE WITH PRE MARKET SECURITY TESTING ON HARDWARE OR SOFTWARE

Expertise in threat modelling, security risk management, secure coding, secure system development, and DevSecOps

Strong experience with Polaris, BlackDuck, Synk, or similar

Experience with security techniques, standards, and methods for authentication and authorization, applied cryptography, security vulnerabilities, and remediation in Windows .NET and Azure environments.

Job Description:

We are seeking a Product Security Engineer to work with one of our Large Medical Device Clients. The Product Security Engineering Contractor will assist with product security tasks, deliverables, and support for the product security and systems engineering teams. This role requires technical expertise, knowledge of safety-critical systems, and the ability to work in a team environment to ensure the security and resilience of our current and developing digital products. Responsibilities:

Understand and adhere to Quality Management System requirements

Contribute to the development/maintenance of threat models, product security risk documentation, and other QMS deliverables Identify and consult on requirements to help address and mitigate security risks and vulnerabilities.

Serve as subject matter expert to the development teams, be security-minded, and raise the level of understanding and compliance. Leverage tools like Polaris (Blackduck) to perform and triage SAST, DAST, and SCA scans.

Collaborate with the team on the security testing and security signals

Support compliance with regulatory requirements, industry standards, and internal policies governing product security.

Stay informed about new tools, regulations, standards, and best practices of the industry.