Product Security Engineer with Medical Device

{
  "content_hash": "e0b31c9cd38f50856421f768e58caea786efb6fa91968f72512b5494ef2e8e0f",
  "source_hash": "98740bb00f0535818dfe92ac816f9111f8e2b82536fa2d2bbf5f917d5adb3003",
  "last_changed_at": "2026-05-31T17:41:07.923Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Burlington, MA, United States",
    "city": "Burlington",
    "region": "MA",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": 146000,
  "salary_min": 118000,
  "inferred_at": "2026-06-04T11:59:20.146Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Burlington, MA, United States",
      "city": "Burlington",
      "region": "MA",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": "year",
  "workplace_type": null,
  "salary_currency": "USD"
}

{}

{
  "id": "744000124978881",
  "ref": "https://api.smartrecruiters.com/v1/companies/tridentconsultinginc2/postings/744000124978881",
  "name": "Product Security Engineer with Medical Device",
  "uuid": "0ba78d70-7d4c-4283-a898-421000f17918",
  "detail": {
    "id": "744000124978881",
    "name": "Product Security Engineer with Medical Device",
    "uuid": "0ba78d70-7d4c-4283-a898-421000f17918",
    "jobAd": {
      "sections": {
        "jobDescription": {
          "text": "<p>Trident Consulting is seeking a \"<strong>&#xa0;Product Security Engineer”&#xa0;</strong>for one of our client in \"<strong>&#xa0;Burlington, MA (Hybrid)”&#xa0;</strong>A global leader in business and technology services.</p><p>&#xa0;</p><p><strong>Please find additional details about the role below:</strong></p><p><strong>Job Title:</strong>&#xa0;<strong>Product Security Engineer</strong></p><p><strong>Location:</strong>&#xa0;<strong>Burlington, MA (Hybrid)</strong></p><p><strong>Job Type:</strong>&#xa0;<strong>Full Time</strong></p><p>&#xa0;</p><p><strong>Salary Range: $118K PA to $146K PA with Benefits</strong></p><p><strong>Relocation assistance available (up to $10,000)</strong></p><p>&#xa0;</p><p><strong>What You’ll Do:</strong></p><p>The Senior Product Security Engineer, based in Burlington Massachusetts, is a critical, high-level engineering position tasked to leading security efforts across the product lifecycle, ensuring products meet regulatory expectations and industry best practices for cybersecurity. This role provides both hands-on technical expertise and cross-functional leadership, with influence over product strategy, development processes, and post-market security posture.</p><p><strong>Security Architecture &amp; Requirements</strong></p><ul><li>Define security requirements and risk mitigations for new products and features.</li><li>Translate regulatory and industry security standards (e.g., FDA, ISO 27001, NIST, OWASP) into actionable product requirements.</li><li>Develop and maintain security architecture diagrams and models for software and integrated systems.</li></ul><p><strong>Development Lifecycle Security</strong></p><ul><li>Embed secure development practices (threat modeling, secure coding, code review standards) into the software development lifecycle.</li><li>Define and support secure CI/CD practices, including secrets management, dependency management, and supply-chain security.</li><li>Partner with DevOps/IT to secure cloud infrastructure, build pipelines, and deployment environments.</li></ul><p><strong>Testing &amp; Validation</strong></p><ul><li>Assist the testing team with security testing efforts for new and on-market products, including penetration testing, fuzzing, and static/dynamic code analysis.</li><li>Update and maintain vulnerability management processes, including SBOM creation and maintenance.</li><li>Collaborate with QA to integrate automated security testing into regression and release pipelines.</li><li><strong>Documentation &amp; Compliance</strong></li><li>Generate and maintain pre-market security documentation to support regulatory submissions (e.g., security risk assessments, security architecture views, threat models, FDA cybersecurity guidance compliance).</li><li>Maintain records of vulnerability assessments, mitigations, and patch processes.</li><li>Support audit and inspection readiness with thorough, traceable documentation</li></ul><p><strong>Vulnerability &amp; Incident Management</strong></p><ul><li>Manage product vulnerability assessment and mitigation activities, both pre-market and post-market.</li><li>Coordinate cross-functional response to newly discovered vulnerabilities, including communication, remediation, and regulatory reporting.</li><li>Track and monitor vulnerability disclosures from third-party libraries and components.</li></ul><p><strong>Cross-Functional Leadership</strong></p><ul><li>Act as the security subject matter expert across product teams.</li><li>Provide training and mentoring to engineers on secure design and coding practices.</li><li>Partner with compliance, regulatory, and quality teams to align product security strategy with organizational goals</li></ul><p><strong>How You’ll Get There:</strong></p><ul><li>7–10 years total professional experience in software engineering, cybersecurity, or related technical fields.</li><li>3–5 years focused on product or embedded system security, ideally within regulated or safety-critical industries (medical device, aerospace, automotive, or defense).</li><li>Demonstrated experience with:</li><li>Designing or assessing security architectures for embedded or connected systems.</li><li>Implementing secure development lifecycle (SDL) practices within engineering teams.</li><li>Leading or participating in vulnerability management and coordinated disclosure processes.</li><li>Generating pre-market cybersecurity documentation or equivalent regulatory submissions (e.g., FDA, ISO 14971, IEC 81001-5-1).</li><li>Collaborating cross-functionally (engineering, QA, regulatory, IT) to implement and sustain security programs.</li></ul><p><strong>Preferred</strong></p><ul><li>Prior experience as a&#xa0;<strong>product security lead</strong>&#xa0;or&#xa0;<strong>security point of contact</strong>&#xa0;for a commercial medical or industrial product.</li><li>Experience integrating&#xa0;<strong>security testing automation</strong>&#xa0;into CI/CD environments.</li><li>Experience supporting&#xa0;<strong>external audits, penetration tests, or third-party security assessments.</strong></li></ul><p><strong>Core Product Security Knowledge</strong></p><ul><li>Secure system and software design principles (least privilege, defense in depth, threat modeling, zero trust).</li><li>Risk management frameworks:&#xa0;<strong>NIST 800-53, NIST 800-30, ISO 27001, ISO 14971</strong>, and&#xa0;<strong>IEC 81001-5-1</strong>.</li><li>Cryptography fundamentals (key management, TLS, symmetric/asymmetric encryption, hashing).</li><li>Authentication and authorization mechanisms, identity management, and secure session handling.</li><li>Secure coding standards (e.g.,&#xa0;<strong>CERT C/C++</strong>,&#xa0;<strong>OWASP</strong>,&#xa0;<strong>MISRA</strong>,&#xa0;<strong>CWE/SANS Top 25</strong>).</li><li>Supply chain security concepts and&#xa0;<strong>SBOM management (SPDX, CycloneDX)</strong>.</li></ul><p><strong>DevOps &amp; Infrastructure Knowledge</strong></p><ul><li>CI/CD security practices, secrets management, container security (Docker, Podman), and artifact signing.</li><li>Common security testing tools:&#xa0;<strong>SAST, DAST, SCA, fuzzers, and pen-testing frameworks</strong>.</li><li>Familiarity with cloud infrastructure (AWS, or on-prem Linux environments).</li><li>Incident response and vulnerability disclosure processes.</li></ul><p><strong>Regulatory &amp; Documentation Knowledge</strong></p><ul><li>FDA cybersecurity premarket and postmarket guidance.</li><li>Secure update/patch management strategies (aligned with FDA “updateability &amp; patchability” expectations).</li><li>Audit-ready documentation practices and traceability to design controls.</li></ul><p><strong>Minimum</strong></p><ul><li>Bachelor’s degree in&#xa0;<strong>Computer Science, Electrical/Computer Engineering, Cybersecurity</strong>, or a related field.</li></ul><p><strong>Preferred</strong></p><ul><li>Master’s degree in&#xa0;<strong>Cybersecurity, Software Engineering, or Systems Engineering</strong>&#xa0;(ideal for regulated product security leadership).</li></ul><p>&#xa0;</p>",
          "title": "Job Description"
        },
        "qualifications": {
          "text": "",
          "title": "Qualifications"
        },
        "companyDescription": {
          "text": "<p><strong>About Trident:</strong><br>\nTrident Consulting is an award-winning IT/engineering staffing company founded in 2005 and headquartered in San Ramon, CA. We specialize in placing high-quality vetted technology<br>\n<br>\n<strong>Some of our recent awards include:</strong><br>\n2022, 2021, 2020 Inc. 5000 fastest-growing private companies in America<br>\n2022, 2021 SF Business Times 100 fastest-growing private companies in Bay Area</p>",
          "title": "Company Description"
        },
        "additionalInformation": {
          "text": "<p>All your information will be kept confidential according to EEO guidelines.</p>",
          "title": "Additional Information"
        }
      }
    },
    "jobId": "2aa97600-3f99-4c54-b867-3e6969d0a991",
    "active": true,
    "company": {
      "name": "Trident Consulting Inc",
      "identifier": "TridentConsultingInc2"
    },
    "creator": {
      "name": "",
      "avatarUrl": ""
    },
    "jobAdId": "b011c5d6-094e-4323-b355-8ab1b06086d6",
    "applyUrl": "https://jobs.smartrecruiters.com/TridentConsultingInc2/744000124978881-product-security-engineer-with-medical-device?oga=true",
    "function": {
      "id": "information_technology",
      "label": "Information Technology"
    },
    "industry": {
      "id": "medical_device",
      "label": "Medical Device"
    },
    "language": {
      "code": "en",
      "label": "English",
      "labelNative": "English (US)"
    },
    "location": {
      "city": "Burlington",
      "hybrid": false,
      "region": "MA",
      "remote": false,
      "address": ".",
      "country": "us",
      "fullLocation": "Burlington, MA, United States"
    },
    "refNumber": "REF493R",
    "postingUrl": "https://jobs.smartrecruiters.com/TridentConsultingInc2/744000124978881-product-security-engineer-with-medical-device",
    "visibility": "PUBLIC",
    "customField": [
      {
        "fieldId": "COUNTRY",
        "valueId": "us",
        "fieldLabel": "Country/Region",
        "valueLabel": "United States"
      },
      {
        "fieldId": "58b80777e4b06b8e19e904e1",
        "valueId": "default",
        "fieldLabel": "Brands",
        "valueLabel": "Trident Consulting Inc"
      }
    ],
    "referralUrl": "https://jobs.smartrecruiters.com/external-referrals/company/TridentConsultingInc2/publication/0ba78d70-7d4c-4283-a898-421000f17918?dcr_ci=TridentConsultingInc2",
    "defaultJobAd": true,
    "releasedDate": "2026-05-06T19:43:07.887Z",
    "experienceLevel": {
      "id": "associate",
      "label": "Associate"
    },
    "typeOfEmployment": {
      "id": "contract",
      "label": "Contract"
    }
  },
  "company": {
    "name": "Trident Consulting Inc",
    "identifier": "TridentConsultingInc2"
  },
  "jobAdId": "b011c5d6-094e-4323-b355-8ab1b06086d6",
  "function": {
    "id": "information_technology",
    "label": "Information Technology"
  },
  "industry": {
    "id": "medical_device",
    "label": "Medical Device"
  },
  "language": {
    "code": "en",
    "label": "English",
    "labelNative": "English (US)"
  },
  "location": {
    "city": "Burlington",
    "hybrid": false,
    "region": "MA",
    "remote": false,
    "address": ".",
    "country": "us",
    "fullLocation": "Burlington, MA, United States"
  },
  "refNumber": "REF493R",
  "department": {},
  "visibility": "PUBLIC",
  "customField": [
    {
      "fieldId": "COUNTRY",
      "valueId": "us",
      "fieldLabel": "Country/Region",
      "valueLabel": "United States"
    },
    {
      "fieldId": "58b80777e4b06b8e19e904e1",
      "valueId": "default",
      "fieldLabel": "Brands",
      "valueLabel": "Trident Consulting Inc"
    }
  ],
  "defaultJobAd": true,
  "releasedDate": "2026-05-06T19:43:07.887Z",
  "detail_errors": [],
  "experienceLevel": {
    "id": "associate",
    "label": "Associate"
  },
  "typeOfEmployment": {
    "id": "contract",
    "label": "Contract"
  }
}