Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
BD

Senior Engineer, Product Cyber Security

BD

. Own cybersecurity deliverables for assigned products from planning through release .

Posted 10/16/2026full-timeRemote • United StatesSenior💰 $117,800 - $188,600 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity deliverables, including threat modeling, vulnerability assessments, and regulatory submissions. Proficient in managing product security across multiple workstreams while ensuring compliance with industry standards.

Highest-signal resume keywords
Cybersecurity EngineeringThreat ModelingStatic Code AnalysisSBOM IntegrationRegulatory Submissions

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Software EngineeringVulnerability AssessmentRisk AcceptanceCommand-Line UseCI/CD PipelinesSecurity DeliverablesPatch ManagementSecurity MetricsWindows HardeningPenetration Testing
Soft Skills
Strong Written CommunicationDocumentation SkillsProject Management
Tools & Technologies
SnykTenableQualysCycloneDXSPDXAI/LLM Tools
Industry Keywords
Medical DevicesIn Vitro DiagnosticsFDA Cybersecurity GuidanceEU MDR/IVDRISO 14971AAMI TIR57IEC 81001-5-1UL 2900ISO 13485

Tech Stack

Tools & technologies
Cyber Security

About the role

Key responsibilities & impact
  • Own cybersecurity deliverables for assigned products from planning through release
  • Create Product Security Management Plans and product cybersecurity plans
  • Lead STRIDE-based threat modeling and risk assessments
  • Run static code analysis and software composition analysis; triage and archive findings
  • Generate, validate and integrate CycloneDX SBOMs into build and release pipelines
  • Monitor post-market vulnerabilities and drive remediation
  • Coordinate penetration tests and evaluate mitigations
  • Maintain patch management plans and security patch verification protocols and reports
  • Contribute to hardened Windows 11 baseline images and product-level exception management
  • Assemble customer cyber assurance packages and answer security questionnaires
  • Prepare cybersecurity content for FDA and EU IVDR regulatory submissions
  • Review third-party security checklists and SOC 2 reports
  • Build automation for SBOMs, scan results and audit evidence
  • Produce portfolio security risk reporting and in-market risk metrics
  • Act as product security subject matter expert for R&D, DevOps, Quality, Regulatory and partner teams

Requirements

What you’ll need
  • Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or a related technical field, or equivalent practical experience
  • 10+ years of experience in software engineering, product or application security, or cybersecurity engineering, including hands-on security work on software products shipped to customers
  • Basic software engineering fluency, including reading and writing code, command-line use, build systems, package ecosystems, and CI/CD pipelines
  • Hands-on experience with threat modeling, vulnerability assessment, CVSS scoring, remediation workflows and risk acceptance
  • Experience with static analysis, software composition analysis tools, and SBOM formats such as CycloneDX or SPDX
  • Experience producing formal security deliverables reviewed in audits or regulatory submissions
  • Strong written communication in English suitable for auditors, regulators and customers
  • Ability to run several product workstreams in parallel in a procedure-driven, documentation-heavy environment
  • Preferred: experience in medical devices, in vitro diagnostics, life sciences or other regulated software
  • Preferred: familiarity with FDA premarket cybersecurity guidance, EU MDR/IVDR, ISO 14971, AAMI TIR57, IEC 81001-5-1 or UL 2900
  • Preferred: experience with Snyk, CyBeats, Tenable, Qualys, Windows hardening, penetration tests, supplier security assessments, security metrics, AI/LLM tools, FDA inspections, notified-body audits or ISO 13485 audits

Benefits

Comp & perks
  • Comprehensive Total Rewards program
  • Reward and recognition opportunities
  • Competitive compensation and benefits programs
  • Learning, growth and development opportunities
  • Face-to-face collaboration culture