Define and execute a comprehensive product security strategy
Build, lead, and mentor a high-performing team of product security professionals
Manage and allocate human and financial resources
Drive a "shift-left" security strategy in the product lifecycle
Oversee a rigorous threat modeling program and lead cybersecurity risk assessments
Champion DevSecOps principles and automate security controls and testing
Provide architectural guidance on secure design
Ensure all required cybersecurity documentation is prepared and submitted
Manage the generation and maintenance of SBOMs and VEX documents
Act as the senior product security subject matter expert during regulatory inspections
Oversee the post-market surveillance program for emerging threats
Lead and manage the security incident response process
Develop and execute plans for communicating security updates

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or related engineering discipline
15 or more years of technical experience in the medical device industry
Minimum of 10 years of progressive experience in cybersecurity
At least 5 years in a leadership or director-level role
At least 3 years of experience integrating security into embedded systems or connected medical devices in a regulated product development environment
Deep expertise in secure SDLC, threat modeling, and vulnerability management
Strong understanding of cybersecurity landscape, embedded systems security, IoT security, and cloud architectures
Industry-recognized certifications such as CISSP, CISM, or CSSLP are highly valued
Proven experience navigating cybersecurity requirements for FDA 510(k) and PMA submissions

Benefits

Health benefits – Medical, Dental, Vision
Personal and Vacation Time
Retirement & Savings Plan (401K)
Employee Stock Purchase Plan
Training & Education Assistance
Bonus
Referral Program
Service Awards
Employee Recognition Program
Flexible Work Schedules

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

product security strategythreat modelingcybersecurity risk assessmentsDevSecOpssecure designSBOM generationVEX documentationsecurity incident responsevulnerability managementsecure SDLC

Soft Skills

leadershipmentoringcommunicationteam managementresource allocationstrategic planningproblem-solvingcollaborationadaptabilitydecision-making

Certifications

CISSPCISMCSSLP