Sr. Engineer, Product Cyber Security

Senior Product Cyber Security Engineer role focused on end-to-end cybersecurity deliverables for assigned products at Waters Corporation. Responsibilities include threat modeling, security testing, vulnerability management, and regulatory compliance documentation for life sciences analytical instruments and software.

Responsibilities

• Own cybersecurity plans and product security management files for assigned products
• Lead STRIDE-based threat modeling sessions and risk assessments with product teams
• Generate SBOMs, run static analysis, monitor post-market vulnerabilities, and coordinate penetration tests
• Produce regulatory submissions and customer assurance packages including security documentation
• Maintain patch management plans and vulnerability remediation timelines

Requirements

• Experience with product cybersecurity engineering and threat modeling methodologies
• Proficiency in static code analysis and software composition analysis tools
• Knowledge of regulatory frameworks (FDA, EU IVDR) and design history file requirements
• Familiarity with SBOM generation, CVSS scoring, and vulnerability management processes
• Experience working with R&D and software engineering teams in regulated environments
• Strong understanding of secure software development lifecycle practices