Principal Product Security Engineer

Job TitleDeliver documentation for pre-market product development activities including security plans, architecture diagrams, data flow diagrams, threat models, security requirements, Design for Security, SBOM, and risk management documentation.Drive and monitor and post-market vulnerability management activities, with adherence to strict timelines.Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.Identify, research, evaluate, and integrate new compliance requirements, industry standards, and best practices into the product security programs.Guide teams to make decisions that balance business needs with medical device security objectives.Work across organizational boundaries and exhibit empathy with customers, both internal and external.Perform other related duties and responsibilities, as assigned.Required SkillsBachelor’s degree5+ years industry experience in Information Security.Working knowledge of regulatory standards and compliance frameworks (e.g., NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR).Experience with security risk management techniques.Demonstrated organizational skills, attention to detail, the ability to handle multiple assignments simultaneously in a timely manner and be able to meet assigned deadlines.Committed to working with a sense of urgency and embracing new challenges.Strong communication and interpersonal skills.