Sr. Product Security Engineer
Novanta Inc.6 days ago
Brno, CzechiaSenior
Responsibilities
- Monitor CVE, NVD, CISA KEV, vendor advisories, SBOM, and SCA outputs to identify vulnerabilities affecting products and third-party components.
- Assess vulnerability applicability, exploitability, product impact, and risk, including triage, prioritization, CVSS evaluation, threat modeling, and risk assessment.
- Own vulnerability reporting from identification through closure, including documentation, remediation tracking, coordinated disclosure, and regulatory reporting.
- Communicate vulnerability impacts and remediation plans to customers and non-technical stakeholders.
- Maintain and improve vulnerability assessment and reporting frameworks, workflows, evaluation criteria, templates, records, and approval processes.
- Automate vulnerability intake, analysis, reporting, metrics, and integration of SBOM and vulnerability intelligence.
- Improve security tooling accuracy, data quality, coverage, and reliability.
Requirements
- At least five years of experience in product security, vulnerability management, cybersecurity operations, or security engineering.
- Hands-on experience with vulnerability analysis, risk evaluation, remediation tracking, and reporting.
- Experience using vulnerability management and reporting tools.
- Overview of operating systems, networking, embedded systems, and third-party components.
- Excellent English communication skills and the ability to explain technical findings to customers and non-technical stakeholders.
- Degree in Cybersecurity, Computer Science, Software Engineering, Electrical Engineering, or a comparable field; equivalent experience may be considered.
- Eligible to work legally in the Czech Republic through permanent residence or free access to the job market.
- Medical device or regulated-industry experience is preferred.
- Knowledge of IEC 81001-5-1, IEC 62304, ISO 14971, EU MDR, FDA medical device cybersecurity expectations, and the EU Cyber Resilience Act is preferred.
- Relevant cybersecurity certifications are advantageous.
Benefits
- 25 days of vacation per year, including an extra week.
- Five sick days per calendar year and one paid charitable-activity day per year.
- Flexi Pass vouchers valued at 1000 CZK per month and supplementary pension insurance contribution of 1000 CZK per month after the probationary period.
- Flexible working hours with core hours from 10:00 to 15:00.
- Meal vouchers valued at 129,50 CZK per day and a home-working allowance for up to two days per week.
- MultiSport membership for 300 CZK per month and employee referral bonuses of up to CZK 110,000.
- Free workplace refreshments, training, language courses, career advancement, and a dog-friendly, family-friendly workplace.
- Corporate events, free employee parking, and workplace shower facilities.
- Hybrid work arrangement indicated by the #LI-Hybrid posting tag.
Categories
About Novanta Inc.
Novanta Inc. designs and manufactures precision photonics, motion control, vision, and laser subsystems used by medical, life‑science, and advanced industrial OEMs. Its products support applications from minimally invasive surgery and robotics to 3D metal printing, sold as engineered components and integrated sub-systems to equipment makers. The company is headquartered in Bedford, Massachusetts and is publicly traded on Nasdaq under the ticker NOVT, with global operations across the Americas, Europe, and Asia‑Pacific.