Product Security Engineer
Smith & Nephew2 days ago
Pune, IndiaMid Level
Responsibilities
- Design, engineer, implement, and maintain cybersecurity tools across the product lifecycle.
- Run Static Application Security Testing, Dynamic Application Security Testing, and Software Composition Analysis scans.
- Support creation of Software Bill of Materials based on product and tooling knowledge.
- Lead cybersecurity testing and assessment integration throughout the development lifecycle.
- Evaluate potential vulnerabilities, support vulnerability response, and communicate risks and mitigation strategies.
- Help develop and mature the global product security strategy and secure software development lifecycle.
- Create comprehensive threat models in collaboration with product teams and product security engineers.
- Design, recommend, plan, guide, and support implementation of security solutions across medical devices, digital accessories, connected infrastructure, and software applications.
Requirements
- Bachelor's degree or equivalent experience, or a master's degree in Computer Science or Information Technology.
- At least 4 years of hands-on cybersecurity experience.
- Strong understanding of vulnerability management, penetration testing, code security, and mitigating security controls.
- Knowledge of security frameworks and standards including HIPAA, FDA, ISO 27001/2, NIST CSF, and OWASP.
- Understanding of network infrastructure, firewalls, web proxies, email architecture, connectivity protocols, and associated security risks.
- Experience with cloud computing platforms and cloud security frameworks.
- Ability to work independently, prioritize multiple tasks, and collaborate effectively with internal stakeholders.
- Experience with FDA and other medical device regulators is preferred.
- CISM, CISSP, CRISC, or similar current certification is preferred.
- Knowledge of medical device product security expectations and threat-actor back channels is preferred.
Benefits
- Hybrid work model requiring two days in the office in Kharadi, Pune.
- UK shift schedule from 12:30 PM to 9:30 PM IST.
- Major medical coverage, educational assistance, and parents/parents-in-law insurance.
- Flexible personal/vacation time off, privilege leave, floater leave, parental leave, and an employee assistance program.
- Hands-on training, team-customized training, and mentorship.
- Free cab transportation and one meal per shift.
- Night shift allowance.
Categories
About Smith & Nephew
Smith+Nephew is a global medical-technology company that designs and manufactures devices for orthopaedics, sports medicine, ENT, and advanced wound management. It sells implants, trauma fixation systems, arthroscopy instruments, surgical robotics (such as the CORI system), and wound dressings/therapies to hospitals and surgeons worldwide through direct sales and distributors. Founded in 1856 and headquartered in Watford, UK, it is a public company listed on the London and New York stock exchanges.