Note: The job is a remote job and is open to candidates in USA. Intellias is seeking a Senior Product Security Engineer to join a growing R&D organization developing next-generation connected medical device solutions. The role focuses on integrating security into embedded and connected products throughout the development lifecycle, including threat modeling, risk analysis, vulnerability remediation, secure-by-design practices, and implementation of product security controls.
Responsibilities
- Partner with software, firmware, hardware, and systems engineering teams to integrate security throughout the product development lifecycle
- Perform product security assessments, threat modeling, and risk analysis for embedded and connected products
- Identify, prioritize, and support remediation of product security vulnerabilities and security risks
- Drive secure-by-design and Secure Software Development Lifecycle (SSDLC) practices across engineering teams
- Support vulnerability management activities, including SBOM, Software Composition Analysis (SCA), and CVE assessment and remediation
- Contribute to the implementation and validation of product security controls, including authentication, encryption, secure communications, secure boot, and software update mechanisms
- Apply industry security standards and best practices (NIST, OWASP, IEC 81001-5-1, FDA guidance) where appropriate
- Provide practical security guidance to engineering teams and help improve the overall product security posture
- Stay current with emerging cybersecurity threats, vulnerabilities, and technologies relevant to connected and embedded products
Skills
- • Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Electrical Engineering, or a related technical field
- • 4+ years of experience in Product Security, Embedded Security, or Cybersecurity Engineering
- • Hands-on experience securing embedded systems, connected devices, or other software-driven products , preferably in regulated or safety-critical industries
- • Strong understanding of: + Secure Software Development Lifecycle (SSDLC) + Threat Modeling + Vulnerability Management & Risk Assessment + Security-by-Design principles
- • Experience identifying, assessing, and mitigating product security risks throughout the product development lifecycle
- • Familiarity with security frameworks and standards such as NIST , OWASP , and secure product development best practices
- • Ability to collaborate effectively with software, firmware, hardware, and systems engineering teams to integrate security into product development
- • Strong communication and stakeholder collaboration skills
- Experience in medical devices is a plus but not required
- Candidates from other regulated or safety-critical industries such as Automotive, Aerospace, Defense, or Industrial IoT are encouraged to apply
- • Experience with cybersecurity for medical devices or other regulated industries (Automotive, Aerospace, Defense, Industrial/IoT, or similar)
- • Experience with: + SBOM generation and management + Software Composition Analysis (SCA) + CVE triage and remediation + Security tooling and vulnerability assessment
- • Familiarity with IEC 81001-5-1, ISO 14971, and FDA cybersecurity guidance
- • Basic scripting or automation experience (Python, Bash, or similar)
- • Security certifications such as CISSP, GIAC, Security+, or equivalent
Benefits
- Hybrid work arrangement
Company Overview