Product Security Engineer

Job Description We are seeking a Product Security Engineer to support the development and security of FDA-regulated medical devices and their associated cloud-connected platforms within a leading healthcare technology organization. This individual will be responsible for executing product security lifecycle activities across devices, software applications, and cloud environments, ensuring solutions are secure, compliant, and aligned with regulatory requirements. The role will partner closely with engineering, quality, regulatory, and product teams to drive threat modeling, security risk assessments, vulnerability management, security architecture, and secure development practices. This is a 12-month contract opportunity with potential for conversion and is primarily remote for candidates located in the Orange County or San Diego metro areas. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: Skills and Requirements

• 5+ years of cybersecurity experience
• Experience supporting FDA-regulated Class I and/or Class II medical devices
• Hands-on experience with product security, including threat modeling, security risk assessments, and vulnerability management
• Working knowledge of embedded security, application security, and cloud security
• Experience supporting cybersecurity activities for regulated product development environments
• Experience contributing to regulatory submissions and cybersecurity documentation • Software development or systems engineering background
• Experience with DevSecOps practices and Secure SDLC implementation
• Knowledge of IEC 62304, ISO 14971, FDA cybersecurity guidance, UL 2900, or AAMI TIR57/TIR97
• Experience with AI/ML, Generative AI, Agentic AI, or IoMT (Internet of Medical Things) technologies
• Relevant security certifications such as CISSP, CCSP, or CSSLP Insight Global