Senior Product Security Engineer

Trident Consulting is seeking a " Senior Product Security Engineer” for one of our client in " Burlington, MA (Hybrid)” A global leader in business and technology services.

Please find additional details about the role below:

Job Title: Senior Product Security Engineer

Location: Burlington, MA (Hybrid)

Type of Hire: Full Time/Direct Hire

Salary range: $140K PA to $180K PA with Benefits

10% Annual Bonus

Relocation assistance available (up to $10,000)

About the Role

We are seeking a Senior Product Security Engineer to join our team in Burlington, MA. This is a highly technical, hands-on role focused on securing embedded medical devices across the full product lifecycle .

You will play a key role in designing and implementing security architecture , working closely with firmware, software, and systems engineering teams to ensure products are secure by design and aligned with regulatory expectations.

This position sits within the broader GRC organization but operates as a deeply technical product security function , bridging engineering, security, and compliance.

Key Responsibilities

Security Architecture & Design

• Design and define security architecture for embedded and connected medical devices
• Lead secure-by-design initiatives , including threat modeling and risk mitigation
• Develop and review security solutions for authentication, encryption, secure communications, and data protection
• Partner with engineering teams to embed security into the product lifecycle

Product & Embedded Security

• Work closely with firmware and software teams to improve security of device components and interfaces
• Support OS and platform hardening (Windows/Linux-based systems)
• Ensure secure update mechanisms, integrity validation, and secure configurations

Penetration Testing & Validation

• Manage and coordinate third-party penetration testing engagements
• Define testing scope, review findings, and drive remediation efforts
• Ensure security validation throughout design, development, and pre-market stages

Vulnerability Management

• Lead identification, tracking, and remediation of vulnerabilities across products
• Coordinate cross-functional response to security issues and disclosures
• Monitor third-party component risks and dependencies

Process & SOP Development

• Develop and implement security processes, standards, and SOPs
• Help mature the organization’s product security program
• Ensure alignment with regulatory and internal security expectations

Required Qualifications

• 7+ years of experience in cybersecurity, product security, or software engineering
• Strong experience in medical device security (REQUIRED)
• Proven background in security architecture and secure design for embedded or connected systems
• Experience working with cross-functional engineering teams (firmware, software, systems)
• Hands-on involvement in threat modeling, vulnerability management, and security testing
• Experience managing or working with third-party penetration testing vendors

Preferred Qualifications

• Experience in regulated environments (FDA, healthcare, or similar)
• Knowledge of standards such as ISO 14971, IEC 81001-5-1, NIST, or similar frameworks
• Background in embedded systems, IoT, or device-level security
• Experience building or improving security processes and SOPs

What Makes This Role Unique

• High-impact role shaping security architecture for real-world medical devices
• Opportunity to work at the intersection of engineering, security, and regulatory compliance
• Direct influence on product security strategy and implementation
• Collaborative, cross-functional environment with strong engineering partnership

Work Environment

• Hybrid role based in Burlington, MA
• Direct hire position with long-term growth potential

About Trident Consulting

Trident Consulting is an award-winning staffing and consulting firm headquartered in San Ramon, CA. Since 2005, we’ve partnered with Fortune 500 and high-growth companies to deliver high-quality talent across technology, engineering, business operations, and professional services.

We specialize in contract, contract-to-hire, and direct hire placements, supporting roles across IT, data & analytics, cloud, cybersecurity, finance & accounting, HR, operations, and more. With a strong focus on hard-to-fill and niche positions, our global recruiting engine enables us to deliver speed, quality, and scale.