"Alerted.org

Job Description

We are seeking a Product Security Engineer to work with one of our Large Medical Device Clients. The Product Security Engineering Contractor will assist with product security tasks, deliverables, and support for the product security and systems engineering teams. This role requires technical expertise, knowledge of safety critical systems, and the ability to work in a team environment to ensure security and resilience of our current and developing digital products.

Responsibilities:

• Understand and adhere to Quality Management System requirements

• Contribute to the development/maintenance of threat models, product security risk documentation, and other QMS deliverables

• Identify and consult on requirements to help address and mitigate security risks and vulnerabilities.

• Serve as subject matter expert to the development teams, be security minded and raise the level of understanding and compliance.

• Leverage tools like Polaris (Blackduck) to perform and triage SAST, DAST, SCA scans.

• Collaborate with the team on the security testing and security signals

• Support compliance with regulatory requirements, industry standards, and internal policies governing product security.

• Stay informed about new tools, regulations, standards, and best practices of the industry.

Compensation:

$10/hr to $14/hr

Exact compensation may vary based on several factors, including skills, experience, and education.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401K retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.

We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to Human Resources Request Form (https://airtable.com/app21VjYyxLDIX0ez/shrOg4IQS1J6dRiMo) . The EEOC "Know Your Rights" Poster is available here (https://www.eeoc.gov/sites/default/files/2023-06/22-088\_EEOC\_KnowYourRights6.12ScreenRdr.pdf) .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Skills and Requirements

Education*:

Bachelor's degree in computer science, information technology, cybersecurity, or related area required, or minimum of 5 years experience in a relevant industry.

Experience*:

Minimum of 2 years experience working as a Software Security Engineer position

Skills:

Experience with embedded technology and software security.

Experience in using Secure Software Development Lifecycle (SSDLC) within agile framework.

Expertise in threat modelling, security risk management, secure coding, secure system development, and DevSecOps

Knowledge of application security and code analysis tools such as Polaris / BlackDuck, or similar.

Experience with security techniques, standards, and methods for authentication and authorization, applied cryptography, security vulnerabilities and remediation in Windows .NET and Azure environments.

Solid technical background and understanding of all aspects of security research and development.

Excellent analytical and troubleshooting skills.

Ability to work both independently and in a team environment.

Excellent communication skills, oral and written.

Other Considerations (travel/hours availability, etc.):

Work time outside of normal work hours may be required from time to time. null

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].