Security Engineer

• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections.
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

Principal Med Device Security Engineer

• Responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms.
• Provide technical expertise and strategic leadership in securing Impella heart pump technologies, next-generation cardiac support systems, and connected medical devices.
• Deliver security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory-compliant security across the product lifecycle.
• Support heart recovery throughout a new product’s development phases.
• Review product security requirements and recommend security design solutions.
• Complete Quality documentation, threat modelling, coordinate third-party penetration testing, software architecture review and design recommendations, code analysis and other security testing work as needed.
• Monitor for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.
• Drive alignment to J&J Product Security’s overarching framework.
• Define and implement secure boot, firmware integrity validation, and anti-tamper mechanisms to protect Heart Recovery Device firmware against unauthorized modification.
• Enforce cryptographic protocols for data-at-rest and data-in-transit, ensuring compliance with FDA cybersecurity requirements, NIST 800-175, FIPS 140-3, and IEC 62443.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Develop real-time vulnerability assessment techniques for detecting security flaws in wireless communications (Bluetooth LE, NFC, Wi-Fi, 5G, proprietary RF) used in Heart Recovery’s medical devices.
• Implement Zero Trust security for device-to-cloud connectivity, integrating mTLS and continuous authentication models into clinical applications.
• Oversee secure OTA (over-the-air) update mechanisms, ensuring firmware rollbacks, code signing, and supply chain integrity validation.
• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections.
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

Principal Medical Device Security Engineer

• The Principal Product Security Engineer will be responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms.
• This role will join Abiomed, part of Johnson & Johnson MedTech, to provide technical expertise and strategic leadership in securing Impella heart pump technologies, next-generation cardiac support systems, and connected medical devices.
• This role is responsible for delivering security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory-compliant security across the product lifecycle.
• Specific responsibilities include supporting heart recovery throughout a new product’s development phases, review product security requirements and recommend security design solutions, complete Quality documentation, threat modelling, coordinate third-party penetration testing, software architecture review and design recommendations, code analysis and other security testing work as needed.
• Additionally, this position will have post market responsibilities for Heart Recovery marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.
• Drive alignment to J&J Product Security’s overarching framework.
• Support the Product Security strategy and objectives within Heart Recovery
• Define and implement secure boot, firmware integrity validation, and anti-tamper mechanisms to protect Heart Recovery Device firmware against unauthorized modification.
• Enforce cryptographic protocols for data-at-rest and data-in-transit, ensuring compliance with FDA cybersecurity requirements, NIST 800-175, FIPS 140-3, and IEC 62443.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Develop real-time vulnerability assessment techniques for detecting security flaws in wireless communications (Bluetooth LE, NFC, Wi-Fi, 5G, proprietary RF) used in Heart Recovery’s medical devices.
• Implement Zero Trust security for device-to-cloud connectivity, integrating mTLS and continuous authentication models into clinical applications.
• Oversee secure OTA (over-the-air) update mechanisms, ensuring firmware rollbacks, code signing, and supply chain integrity validation.
• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

• Own and optimize the Elastic Security platform (Elasticsearch, Kibana, Fleet, Logstash, Elastic Agents)
• Design and maintain ingestion pipelines for cloud, endpoint, network, and application telemetry
• Improve telemetry quality, data retention, performance, and investigation workflows
• Integrate SIEM workflows with SOAR and automation tooling
• Build and maintain a Detection-as-Code pipeline using Git-based workflows and CI/CD automation
• Develop, test, tune, and maintain high-fidelity detections using Elastic Security, EQL, and KQL
• Reduce alert noise through tuning, enrichment, suppression, and exception handling
• Map detections to MITRE ATT&CK and drive detection coverage strategy
• Assist with complex alert escalations and perform initial incident scoping
• Translate incident learnings into improved detections and telemetry coverage
• Partner with other teams to improve logging and visibility

Senior Security Engineer – Elastic SIEM, Detection Engineering

• Help define and evolve the vision for NinjaOne’s endpoint management and security capabilities.
• Contribute to and own key parts of the endpoint management and security roadmap.
• Drive product direction for features to identify security gaps, and remediate or protect against them.
• Work closely with engineering, design, support, and other stakeholders to bring new capabilities from concept to delivery.
• Engage with customers, MSPs, and internal teams to understand how endpoint management and security features are used in practice.
• Write clear product requirements, define workflows and edge cases, and ensure features are delivered to a high standard.
• Ensure capabilities work cohesively across NinjaOne and enable other product areas to build on top of them effectively.

Product Manager – Endpoint Management, Security

• Lead technical discovery calls and translate customer requirements into high-level solution designs
• Speak credibly about product capabilities, integrations, and architectural trade-offs (e.g., Splunk, Sentinel, CrowdStrike Next-Gen SIEM, Tines, Torque, Snowflake)
• Draw integration diagrams, validate technical feasibility, and position GuidePoint's differentiated capabilities
• Support account executives in pre-sales engagements, ensuring technical alignment before formal scoping
• Stay current on security operations trends, emerging platforms, and competitive positioning
• Collaborate with delivery architects to ensure smooth transitions from sales to implementation

Security Architect – Presales

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• Supporting JJV throughout a new product’s development phases
• Review product security requirements and recommend security design solutions
• Help complete Quality documentation, threat modelling, penetration testing, software architecture review and design recommendations, code analysis and other security testing or work as needed.
• Post market responsibilities for JJV marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to all customer security questionnaires and reviewing security language within contractual agreements.
• Drive adherence to J&J Product Security’s overarching framework: Champion Product Security strategy and objectives within JJV
• Partner with internal organizations to enhance existing processes and policies
• Create and present Product Security metrics to management
• Responsible and accountable to implement and enforce Product Security governance model for JJV pre and post market medical devices.
• Perform automated code scanning and coordinate formal security testing.
• Respond to customer cybersecurity questionnaires and contractual language for all post-market medical devices.
• Other MedTech cybersecurity related duties as needed

Product Security Manager

• Supporting JJV throughout a new product’s development phases
• Review product security requirements and recommend security design solutions
• Help complete Quality documentation, threat modelling, penetration testing, software architecture review and design recommendations, code analysis and other security testing or work as needed.
• Post market responsibilities for JJV marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to all customer security questionnaires and reviewing security language within contractual agreements.
• Drive adherence to J&J Product Security’s overarching framework:
• Champion Product Security strategy and objectives within JJV
• Partner with internal organizations to enhance existing processes and policies
• Create and present Product Security metrics to management
• Responsible and accountable to implement and enforce Product Security governance model for JJV pre and post market medical devices.
• Perform automated code scanning and coordinate formal security testing.
• Respond to customer cybersecurity questionnaires and contractual language for all post-market medical devices.
• Other MedTech cybersecurity related duties as needed

• Oversee implementations and consultative engagements for the Proofpoint Data Security products
• Develop new services, implement best practices, and assist in customer escalations as needed
• Align client business priorities with data protection strategies
• Assess client operations and business processes, gathering requirements, and recommending optimized Proofpoint solutions
• Provide strategic program design solutions to help clients identify, protect, monitor, and manage sensitive data and users
• Collaborate with Professional Services, Support, Engineering, and Product teams to resolve customer concerns and escalations
• Partner with the sales organization to ensure customer needs are met and satisfaction remains high
• Present updates to management, highlighting risks, challenges, and proposed solutions

Senior Professional Services Consultant – Data Security

• The Cybersecurity Architect will be responsible for providing secure solutions and services which provide defense in depth for Camden’s enterprise computing systems.
• Develop long-term cyber security strategies and roadmaps, using security frameworks to strengthen the Bank’s overall information security posture.
• Align enterprise security architecture with applicable regulatory and industry frameworks including NIST CSF, SOX, and GLBA requirements.
• Participate in security reviews of vendor technologies, SaaS solutions, and integrations.
• Analyze and recommend security controls and procedures in the acquisition, development, and change management lifecycle of information systems.
• Use industry standard security architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity, and availability.
• Provide technical security leadership to evolve the organization’s Zero Trust security architecture strategy across cloud, identity, endpoint, and network domains.
• Support and develop security standards and governance controls for enterprise AI platforms, generative AI integrations, and machine learning-enabled business solutions.
• Partner directly with technology and business stakeholders on the identification, development and review of enterprise security standards.
• Coach and mentor teams to incorporate security into enterprise and customer-facing applications.
• Contribute to and advance the organization’s security strategy and product roadmap.
• Identify and communicate current and emerging threats to the organization.
• Protect the company’s information assets using a variety of technological and security controls.
• Respond to all system and network security breaches.
• Assist in complex security control analysis and enterprise security design problem solving.
• Conduct architecture risk assessments and threat modeling using frameworks such as STRIDE, MITRE ATT&CK, or attack path analysis.

Cybersecurity Architect

• Lead technical discovery sessions to understand customer business drivers, networking environments, and security requirements
• Design and articulate scalable SASE and Zero Trust architectures incorporating secure SD‑WAN, SSE, identity‑based access, and firewall technologies
• Deliver high‑impact product demonstrations, workshops, and proof‑of‑concepts showcasing HPE Aruba Networking SASE, including SD‑WAN, ZTNA, SWG, CASB, and DEM use cases
• Position and integrate solutions across the broader HPE + Juniper networking and security portfolio, including next‑generation firewalls and data‑center‑to‑cloud security designs
• Support sales pursuits by responding to RFPs, RFIs, and security questionnaires with clear, technically accurate documentation and diagrams
• Collaborate closely with account managers, specialist peers, partners, and services teams to drive successful deal outcomes
• Present confidently to both technical audiences and executive stakeholders, including security leaders and architects
• Provide field feedback to product management and engineering teams to influence roadmap and solution enhancements
• Travel across the Eastern U.S. to support customer meetings, partner engagements, workshops, and industry events

Security Engineer jobs in Maine

See all jobs on JobTailor

Principal Med Device Security Engineer

Principal Medical Device Security Engineer

Principal Med Device Security Engineer

Senior Security Engineer – Elastic SIEM, Detection Engineering

Product Manager – Endpoint Management, Security

Security Architect – Presales

Application Security Consultant

Product Security Manager

Product Security Manager

Senior Professional Services Consultant – Data Security

Cybersecurity Architect

SASE & Security Presales Specialist