Support the design, implementation, and validation of product security controls across Insulet’s embedded, mobile, and cloud environments.
Implement secure system designs, cryptographic mechanisms, device identity solutions, and PKI‑based trust models.
Collaborate closely with engineering, product, validation, regulatory, and compliance teams.
Integrate security requirements throughout the product lifecycle.
Contribute to cybersecurity documentation aligned with FDA guidance for connected medical devices.

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field
3–5 years of experience in product security, embedded security, applied cryptography, or related domains.
Experience contributing to secure communication mechanisms across embedded, mobile, or cloud environments.
Working knowledge of PKI concepts, X.509 certificates, and certificate lifecycle management.
Solid understanding of common cryptographic algorithms and protocols (e.g., AES, RSA, ECC, SHA‑2/3, TLS).
Experience or exposure to secure boot, software signing, and TEE / secure enclave technologies (e.g., ARM TrustZone, Apple Secure Enclave, Android Keystore).
Familiarity with cloud API security concepts (OAuth 2.0, JWT, TLS) and secure software update mechanisms.
Basic understanding of threat modeling, attack surfaces, and exploit techniques (e.g., STRIDE).

Product Security Engineer

Key skills