Principal Product Security Engineer

Lead and automate Software Bill of Materials (SBOM) generation compliant with FDA requirements, including adding end-of-support and software level-of-support data.

Triage, analyze, and provide remediation actions for vulnerabilities identified through SBOM monitoring and vulnerability management tools.

Technically lead a team of engineers on product security tasks including vulnerability assessment, threat modeling, and proposing technical security solutions.

Bachelor’s degree in Computer Science, Software Engineering, or equivalent.

12 to 16 years of relevant experience in product security, vulnerability management, threat modeling, and CVSS scoring.

Proficiency in Python or another scripting language for automation purposes.

Experience working in regulated industries; familiarity with SBOM management tools like Dependency-Track and medical device cybersecurity guidance.

Experienced in product security within regulated industries, preferably medical devices, with hands-on knowledge of cybersecurity compliance standards such as FDA guidance, IEC 62304, IEC 81001-5-1.

Operates with strong technical leadership capabilities, managing teams and collaborating cross-functionally to assess and remediate security risks effectively.

Skilled in vulnerability management workflows automation and advanced scripting to improve security processes and compliance readiness.