Principal Product Security Engineer
Smith & Nephew1 day ago
Pittsburgh, PA, USA or Southfield, MI, USAStaff+
Base Salary
$126k - $198k/yr
Responsibilities
- Define and implement cybersecurity requirements and controls across medical devices, digital accessories, connected infrastructure, and software applications.
- Maintain product cybersecurity risk registers and threat models throughout the development lifecycle.
- Lead vulnerability testing, penetration testing, code analysis, software composition analysis, and endpoint protection activities.
- Recommend security solutions and support automated tools and processes that reduce vulnerabilities.
- Help mature the Global Product Security Strategy and Secure Software Development Life Cycle.
- Support product cybersecurity incident response and provide technical leadership to regulators, customers, auditors, industry groups, and security researchers.
Requirements
- Bachelor’s degree in life science, computer science, information systems, or equivalent formal training or professional experience.
- At least five years of hands-on experience in product security, device security, application security, or information technology security.
- Experience with vulnerability management, penetration testing, code security, security governance, risk assessments, network infrastructure, and cloud security.
- Knowledge of medical device regulations and cybersecurity frameworks, including HIPAA, FDA requirements, ISO 27001, ISO 27002, NIST CSF, and OWASP.
- Ability to design and guide innovative security solutions independently across multiple teams and business areas.
- Strong written and verbal communication, prioritization, customer service, and problem-resolution skills.
- Current CISM, CISSP, CRISC, or equivalent certification is preferred.
Benefits
- Base compensation is listed at $125,500.00–$198,000.00 annually, with bonus eligibility.
- Benefits include medical, dental, vision, health savings account contributions, 401k programs, tuition reimbursement, medical leave, parental leave, fertility and adoption assistance, and wellness offerings.
- Additional benefits include flexible personal/vacation time off, paid holidays, flex holidays, paid community service day, mentorship, training, and discounts on fitness clubs and travel.
- The position is identified as hybrid.
- The anticipated application window closes on 10.10.2026.
Categories
About Smith & Nephew
Smith+Nephew is a global medical-technology company that designs and manufactures devices for orthopaedics, sports medicine, ENT, and advanced wound management. It sells implants, trauma fixation systems, arthroscopy instruments, surgical robotics (such as the CORI system), and wound dressings/therapies to hospitals and surgeons worldwide through direct sales and distributors. Founded in 1856 and headquartered in Watford, UK, it is a public company listed on the London and New York stock exchanges.