4 days ago
Remote, United States +5 moreSenior
Base Salary
$118k - $189k/yr
Responsibilities
- Own cybersecurity plans and Product Security Management Plans for assigned products and releases.
- Lead STRIDE-based threat modeling, data-flow analysis, CVSS risk scoring, remediation workflows, and documented risk acceptance.
- Run or coordinate static analysis, software composition analysis, SBOM generation and validation, penetration testing, vulnerability monitoring, and patch verification.
- Create formal security deliverables including risk reports, threat models, vulnerability reports, security white papers, incident and vulnerability plans, and supplier assessments.
- Build and maintain scripts and pipeline steps that automate SBOMs, scan results, metrics, and audit evidence.
- Prepare cybersecurity content for FDA and EU IVDR submissions and support audits, regulatory interactions, and customer assurance requests.
- Provide product security guidance to R&D, DevOps, Quality, Regulatory, and partner teams.
Requirements
- Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
- At least 10 years of experience in software engineering, product or application security, or cybersecurity engineering, including hands-on security work on shipped software products.
- Ability to read and write code, use the command line, and work with build systems, package ecosystems, and CI/CD pipelines.
- Hands-on experience with threat modeling, vulnerability assessment, CVSS scoring, remediation workflows, and risk acceptance.
- Experience with static analysis, software composition analysis, SBOM formats, and formal security deliverables reviewed in audits or regulatory submissions.
- Strong technical writing and the ability to manage multiple product workstreams in a procedure-driven environment.
- Preferred experience includes regulated software or medical devices; FDA cybersecurity guidance, EU MDR/IVDR, ISO 14971, AAMI TIR57, IEC 81001-5-1, or UL 2900; Snyk, CyBeats, Tenable, or Qualys; Windows hardening; penetration-test coordination; supplier security assessments; security metrics; and AI or large language model tools.
Benefits
- Remote within the United States with regular overlap with Pacific Time working hours.
- Comprehensive Total Rewards program with compensation and benefits programs, reward and recognition opportunities, and professional development support.
- Equal opportunity employment and a culture focused on learning, growth, collaboration, and purpose-driven healthcare innovation.
Tech Stack
npm
Categories
About BD
BD (Becton, Dickinson and Company) designs and manufactures medical devices, diagnostic equipment, laboratory instruments, and reagents for hospitals, clinical laboratories, and biopharma research. Its portfolio spans medication delivery (syringes, infusion sets), specimen collection, diagnostics, surgery, and vascular access, sold globally through direct sales and distributors. Founded in 1897 and headquartered in Franklin Lakes, New Jersey, BD is a public company listed on the NYSE (BDX).