8+ YOE Lead Product Security Engineer - 1B

Job Requirements

As a Lead Product Security Engineer, you will be responsible for driving Product Security activities throughout the Secure Software Development Lifecycle (SSDLC), working closely with Software Architects, Development teams, DevOps, Quality Engineering, and Product Management to build secure medical products.

This role requires a strong technical background in Product Security, Application Security, Security Architecture, Threat Modeling, DevSecOps, and Vulnerability Management.

Work Experience

Responsibilities

• Perform Threat Modeling using STRIDE, PASTA, MITRE ATT&CK and similar methodologies.

• Conduct Security Architecture Reviews and recommend Secure-by-Design solutions.

• Define and review Product Security requirements during software development.

• Perform security assessments using SAST, DAST and Software Composition Analysis (SCA) tools.

• Drive vulnerability triage, risk assessment, remediation tracking and security verification.

• Review SBOMs and monitor third-party software risks using industry-standard tools.

• Collaborate with architects and engineering teams to implement secure coding and security best practices.

• Support cloud-native and container-based product security initiatives (Optional)

• Work with cross-functional teams to evaluate security risks and identify practical compensating controls for legacy products.