Product Security Engineer
Smith & Nephew3 days ago
Pune, IndiaMid Level
Responsibilities
- Design, engineer, implement, and maintain product security tools across the product lifecycle.
- Run Static Application Security Testing, Dynamic Application Security Testing, and Software Composition Analysis scans.
- Support creation of Software Bill of Materials based on product and tooling knowledge.
- Lead cybersecurity testing and assessment integration throughout the development lifecycle.
- Evaluate vulnerabilities, support vulnerability response, and communicate risks and mitigation strategies.
- Help develop and mature the product security strategy and secure software development lifecycle.
- Create comprehensive threat models with product teams and product security engineers.
- Provide technical leadership for cybersecurity architecture and engineering services across medical devices, connected infrastructure, and software applications.
Requirements
- Bachelor’s degree or equivalent experience, or a master’s degree in Computer Science or Information Technology.
- Minimum four years of hands-on cybersecurity experience.
- Strong understanding of vulnerability management, penetration testing, code security, and mitigating security controls.
- Knowledge of HIPAA, FDA, ISO 27001/2, NIST CSF, and OWASP frameworks.
- Understanding of network infrastructure, firewalls, web proxies, email architecture, connectivity protocols, cloud platforms, and cloud security frameworks.
- Ability to design, recommend, plan, guide, and support implementation of security solutions.
- Experience with medical device regulators is preferred.
- CISM, CISSP, CRISC, or similar certification is preferred.
- Ability to manage multiple priorities, work independently, and collaborate effectively with stakeholders.
Benefits
- Hybrid work model with two days per week in the Kharadi, Pune office.
- UK shift schedule from 12:30 PM to 9:30 PM IST.
- Major medical coverage, educational assistance, flexible personal/vacation time off, privilege leave, and floater leave.
- Parents and parents-in-law insurance, employee assistance program, and parental leave.
- Hands-on training, team-customized training, and mentorship.
- Free cab transportation, one meal per shift, and night shift allowances.
Categories
About Smith & Nephew
Smith+Nephew is a global medical-technology company that designs and manufactures devices for orthopaedics, sports medicine, ENT, and advanced wound management. It sells implants, trauma fixation systems, arthroscopy instruments, surgical robotics (such as the CORI system), and wound dressings/therapies to hospitals and surgeons worldwide through direct sales and distributors. Founded in 1856 and headquartered in Watford, UK, it is a public company listed on the London and New York stock exchanges.