Principal Product Cybersecurity Engineer

Haemonetics

Principal Product Cybersecurity Engineer securing medical devices and applications with a focus on AWS and DevSecOps. Requires 10+ years in cybersecurity and related certifications.

Posted 5/27/2026full-timeBoston • Massachusetts • 🇺🇸 United StatesLead💰 $103,600 - $176,400 per yearWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

cybersecurity engineeringproduct securityapplication securitysecure SDLCDevSecOpsthreat modelingAWS cloud securityvulnerability managementsecurity testingAPI security

Soft Skills

technical leadershipmentoringcollaborationcommunication

Tools & Technologies

AWSCI/CD pipelinesNIST CSFISO 27001IEC 62304ISO 14971ISO 13485FDA cybersecurityUL 2900AAMI TIR57

Certifications & Qualifications

CISSPCISMCompTIA Security+CySA+GSECGWAPTGPEN

Industry Keywords

medical devicesconnected devicesSaMDregulated healthcare environmentpost-market cybersecuritysecurity frameworksEU MDRIEC 81001-5-1

Tech Stack

Tools & technologies

AWSCloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Secure Product Development & SaMD Security: Embed security into the medical device and SaMD SDLC; perform threat modeling and architecture reviews
Cloud & Backend Product Security: Secure AWS-hosted product backends, design and review security architectures using AWS services
DevSecOps & Supply Chain Security: Integrate security testing into CI/CD pipelines
Vulnerability Management & Post-Market Cybersecurity: Support product vulnerability intake, triage, and remediation
Technical Leadership: Serve as the product security subject matter expert for engineering teams, mentor engineers

Requirements

What you’ll need

10+ years of experience in cybersecurity engineering with a strong focus on product and application security
Direct experience securing medical devices, connected devices, or SaMD in a regulated healthcare environment
Strong understanding of secure SDLC and DevSecOps practices, threat modeling methodologies, OWASP Top 10 and API security risks
Hands-on experience with AWS cloud security in support of products and services
Familiarity with healthcare and product security frameworks, including NIST CSF/800-53 and ISO 27001
Ability to work effectively across Engineering, Quality, Regulatory, and Product teams
Experience with medical device standards and guidance, including IEC 62304, ISO 14971, ISO 13485, FDA cybersecurity expectations, UL 2900, AAMI TIR57/TIR97, EU MDR and IEC 81001‑5‑1
Certifications (One or More Required): CISSP (ISC²) or CISM (ISACA), CompTIA Security+ or CySA+, GIAC certifications (e.g., GSEC, GWAPT, GPEN)

Benefits

Comp & perks

401(k) with up to a 6% employer match and no vesting period
Employee stock purchase plan
Flexible time off for salaried employees
Accrual of three to five weeks’ vacation annually for hourly employees
Accrual of up to 64 hours (annually) of paid sick time
Paid and/or floating holidays
Parental leave
Short- and long-term disability insurance
Tuition reimbursement
Health and welfare benefits