The Job Responsibilities

We are hiring a Senior Staff Product Security Engineer to work hybrid in our Andover, MA office.

The Senior Staff Product Security Engineer defines and drives product cybersecurity strategy across business units. The role establishes enterprise cybersecurity architecture standards, leads complex risk adjudication decisions, and ensures alignment with global regulatory expectations.

Main Responsibilities:

• Define long term product cybersecurity strategy and enterprise security architecture direction.
• Establish global cybersecurity design standards and governance frameworks across product portfolios.
• Lead enterprise level vulnerability management strategy and risk prioritization decisions.
• Represent the organization in regulatory engagements and industry cybersecurity initiatives.
• Drive alignment with evolving global cybersecurity regulations and standards.
• Define cybersecurity metrics and continuous improvement initiatives.
• Develop senior engineering capability and provide technical mentorship.
• Performs other duties as needed and assigned.

Your Qualifications

• Bachelor of Science in Computer Science, Cybersecurity, Computer Engineering, or related discipline. Master preferred.
• 10 or more years of experience in cybersecurity engineering within regulated medical device or similar industries.
• Demonstrated enterprise level influence in cybersecurity strategy and regulatory alignment.
• Cybersecurity Certifications: CISSP ISSMP Information Systems Security Management Professional, Offensive Security Certified Professional OSCP, GIAC Enterprise Defender GCED, Equivalent advanced enterprise level cybersecurity certifications will be considered.
• Ability to define enterprise product cybersecurity strategy aligned with evolving global regulatory expectations.
• Experience adjudicating complex cybersecurity risk decisions balancing patient safety and system availability.
• Representation of the organization in regulatory discussions and industry cybersecurity forums.
• Required Tools:
  • Enterprise vulnerability management platforms
  • Security architecture modeling tools
  • Metrics and governance reporting platforms

Compensation: