Note: The job is a remote job and is open to candidates in USA. Mindlance is seeking a Senior Product Security Engineer to support a leading medical technology organization developing secure, connected medical devices and AI-powered solutions. The role leads product security engineering activities, develops and integrates AI capabilities, implements Secure SDLC and DevSecOps practices, and secures embedded devices, applications, APIs, cloud environments, and device-to-cloud communications. The engineer will also support FDA cybersecurity requirements, vulnerability management, SBOM/VEX processes, and cross-functional secure-by-design initiatives.
Responsibilities
- Lead Product Security Engineering activities including threat modeling, risk assessments, security requirements, architecture reviews, and security testing
- Develop AI-powered skills, agents, and services and integrate AI capabilities into product development workflows
- Implement Secure SDLC / DevSecOps practices using SAST, SCA, secrets, container, and IaC scanning
- Secure embedded devices, applications, APIs, cloud environments, and device-to-cloud communications
- Support FDA cybersecurity requirements, threat models, SBOMs, risk assessments, and regulatory documentation
- Perform manual secure code reviews, vulnerability triage, and API/application security assessments
- Establish SBOM and VEX processes and drive risk-based vulnerability remediation
- Partner with Engineering, R&D, Quality, Regulatory, and Product teams to drive secure-by-design and secure-by-default solutions
Skills
- • 5+ years of cybersecurity / product security experience
- • Strong software development or systems engineering background
- • Hands-on experience with AI, Generative AI, Agentic AI, ML, or AI agent development
- • Experience across e mbedded/device, cloud, and application security
- • Strong experience with Threat Modeling, Risk Assessment, Secure SDLC, and Vulnerability Management
- • Strong Web/API Security knowledge, including OWASP ASVS/API Top 10
- • Experience with authentication/authorization, OAuth 2.0, OIDC, SAML, and secure API design
- • Ability to read/write production code in at least one systems programming language
- • Experience with SBOM, VEX, SPDX, or CycloneDX
- 📍 Location: Irvine / Orange County, CA preferred
- 🏠 Work Arrangement: Remote; Irvine/Orange County candidates strongly preferred
- • Medical device / IoMT cybersecurity experience
- • FDA Class I/II medical device experience
- • FDA cybersecurity submission experience
- • Knowledge of IEC 62304, ISO 14971, UL 2900, AAMI TIR57/TIR97
- • DevSecOps experience
- • Certifications such as CISSP, CCSP, or CSSLP
Benefits
- Remote work arrangement; Irvine/Orange County candidates strongly preferred
- Potential Temp-to-Perm opportunity
Company Overview
Company H1B Sponsorship