Senior Product Security Engineer
Hologic, Inc.1 day ago
Santa Clara, CA, USASenior
Base Salary
$107k - $172k/yr
Responsibilities
- Champion Secure by Design practices across connected health product teams.
- Improve security policies and procedures and align products with security requirements and regulatory standards.
- Create and maintain security design documentation, architecture diagrams, controls, and requirements.
- Conduct security assessments and threat modeling for Hologic products and remote connectivity solutions.
- Perform security risk management and address vulnerabilities and security design issues.
- Support product development through secure code reviews and secure coding practices.
- Automate security testing and reporting, manage security tooling, and secure cloud environments.
- Monitor in-market products and connected health solutions and participate in incident response investigations.
- Educate sales and service teams on product and operating-environment security.
- Diagnose and resolve issues involving networked, computer-based products and support product and field teams.
Requirements
- Bachelor’s or master’s degree in Computer Science, Management Information Science, Engineering, or a related technical field.
- At least 4 years of relevant experience in computer and network security, cloud platforms, network administration, Windows and Linux operating systems, software application testing and maintenance, and cybersecurity risk assessment.
- Knowledge of the secure development lifecycle and experience in a development environment.
- Experience with application security design, secure code reviews, secure coding standards, OWASP Top 10, and CWEs.
- Proficiency in scripting and simple application development using tools or languages such as PowerShell, Python, C#, and C++.
- Experience with SAST, SCA, DAST, vulnerability scanning, threat modeling, penetration testing, cloud security, and DevSecOps pipelines.
- Working knowledge of cloud design concepts and security analysis and protection tools, with Azure preferred.
- Preferred experience includes medical information systems, medical-device security standards, regulated-industry software development and verification, and technical support for field service teams or end users.
- Security, operating-system, and networking certifications such as CISSP, Windows/Linux, and Cisco certifications are strongly preferred.
- Strong verbal and written communication skills and willingness to travel to offices, training, and customer sites.
Benefits
- The role may be based in Newark, Delaware; Santa Clara, California; Marlborough, Massachusetts; or remotely.
- The company provides comprehensive onboarding training and continued development and training throughout the employee’s career.
- The role is bonus eligible.
About Hologic, Inc.
Hologic builds breast and skeletal imaging systems, molecular diagnostic platforms and assays, and GYN surgical devices used by hospitals, imaging centers, and clinical labs. Its business model combines capital equipment sales with recurring revenue from consumables, assays, and service contracts. Founded in 1985 and headquartered in Marlborough, Massachusetts, Hologic is listed on Nasdaq (HOLX) and is associated with 3D mammography and the Panther molecular testing platform.