Sr II - Embedded Product Security Engineer (Remote)

Arthrex is a medical device manufacturer. The Senior II Embedded Product Security Engineer helps product design and development teams secure connected and IoT medical devices throughout the product lifecycle. The role contributes to security architecture reviews, requirements, vulnerability testing, and documentation for regulatory submissions.

Responsibilities:

• Designs security architecture of components or functional systems and modifies existing designs to develop or improve products
• Recommends alterations to development and design to improve the security of products and/or procedures
• Contributes to a broader design perspective and considers how an application interacts with the underlying infrastructure or external resources
• Develops threat scenarios and designs responses for associated vulnerabilities to mitigate risk
• Maintains design history file for assigned projects, adhering to Arthrex design control procedures
• Determines the necessity of security testing and initiates testing of assigned products
• Provides Regulatory department technical support for assigned projects as needed
• Supports Marketing and Product Management with technical information to be used for training and marketing of assigned products
• Supports Software Engineering to design and develop components, processes, and training using Security-by-Design and Privacy-by-Design principles
• Supports surgeon and distributor customers in the sales process by educating and demonstrating security-focused aspects of assigned products as needed
• Partner with Legal, Compliance, Privacy, and Information Security departments to ensure products and staff comply with required laws, regulations, and policies
• Reports progress and status of assigned projects on a timely basis
• May be required to travel; International travel may be required

Requirements:

• The right candidate for this role will have some experience securing and pen-testing embedded or IoT devices along with a background in electrical engineering or software system design
• Complete understanding and application of principles, concepts, practices, and standards.  Full knowledge of industry practices
• Knowledgeable of System and Software Development Processes and Lifecycles required
• Knowledgeable of application security best practices required
• Knowledgeable of FDA and ISO guidelines for the development of medical devices required
• Experience leading strategic discussion that addresses both business and technical risks required
• Proficiency in the development of threat scenarios and risk mitigation techniques required
• Proficiency in the use of the privacy by design principle required
• 8 years of related experience
• Bachelor's degree required
• Strong Project management and communication skills preferred
• Experience in web application security and controls concepts preferred
• Experience in embedded system development, IoT lifecycle, real-time operating systems, firmware, RFID, CANbus, WiFi, or Bluetooth LE preferred
• preferably in Engineering (Mechanical, Biomedical, Electrical or Software Engineering), Computer Science, Information Security, or Cybersecurity