The BD Product Security Engineer is responsible for enhancing the security of BD's products and solutions throughout their lifecycle. You will specifically be working on their on-premises, instrumented, firmware products that involve robotics and microprocessors. This role involves collaborating with R&D and product teams to ensure secure design, implementing security tools, investigating threats and vulnerabilities, conducting threat research, and developing risk assessments. The engineer will also ensure the adoption of the corporate product security framework, ensure FDA compliance, lead threat hunting activities, and support regulatory documentation and project management. Additionally, you will be responsible for reading code, researching vulnerabilities, threat modeling, implementing security tools into the development pipeline, recommending strong security designs, and documenting your work following a quality system.
We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to
HR@insightglobal.com. The EEOC "Know Your Rights" Poster is available
here.
To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:
https://insightglobal.com/workforce-privacy-policy/ .
Minimum of 3 years of experience as a product security engineer
Experience working instrumented / on prem / firmware products ideally in the medical field or similar industry
Ability to read and review programming languages such as C/C++, C#, Python, JavaScript, Ruby, PHP, Go, Swift.
Experience with DevSecOps and security tooling for SAST, DAST, and vulnerability scanning.
Strong knowledge of cybersecurity threats, vulnerabilities, and attack vectors.
Experience with security frameworks like NIST 800-53, IEC 81001-5, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2.
Bachelors degree in computer science, computer engineering, security engineering, or a related technical field.
Certifications such as PMP, CISSP, HCISPP.
Cybersecurity experience in medical devices, diagnostic systems, or highly regulated environments like healthcare or pharmaceuticals.
Experience with related cybersecurity tools.
Direct experience working in federally regulated environments with strict software development security processes and standards.
Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.