Note: The job is a remote job and is open to candidates in USA. Mindlance is seeking a Senior Product Security Engineer to support a leading medical technology organization developing secure, connected medical devices and AI-powered solutions. The role leads product security engineering, AI integration, Secure SDLC and DevSecOps initiatives, vulnerability management, regulatory compliance, and secure-by-design collaboration across engineering and product teams.
Responsibilities
- Lead Product Security Engineering activities including threat modeling, risk assessments, security requirements, architecture reviews, and security testing
- Develop AI-powered skills, agents, and services and integrate AI capabilities into product development workflows
- Implement Secure SDLC / DevSecOps practices using SAST, SCA, secrets, container, and IaC scanning
- Secure embedded devices, applications, APIs, cloud environments, and device-to-cloud communications
- Support FDA cybersecurity requirements, threat models, SBOMs, risk assessments, and regulatory documentation
- Perform manual secure code reviews, vulnerability triage, and API/application security assessments
- Establish SBOM and VEX processes and drive risk-based vulnerability remediation
- Partner with Engineering, R&D, Quality, Regulatory, and Product teams to drive secure-by-design and secure-by-default solutions
Skills
- 5+ years of cybersecurity / product security experience
- Strong software development or systems engineering background
- Hands-on experience with AI, Generative AI, Agentic AI, ML, or AI agent development
- Experience across e mbedded/device, cloud, and application security
- Strong experience with Threat Modeling, Risk Assessment, Secure SDLC, and Vulnerability Management
- Strong Web/API Security knowledge, including OWASP ASVS/API Top 10
- Experience with authentication/authorization, OAuth 2.0, OIDC, SAML, and secure API design
- Ability to read/write production code in at least one systems programming language
- Experience with SBOM, VEX, SPDX, or CycloneDX
- 📍 Location: Irvine / Orange County, CA preferred
- 🏠 Work Arrangement: Remote; Irvine/Orange County candidates strongly preferred
- Medical device / IoMT cybersecurity experience
- FDA Class I/II medical device experience
- FDA cybersecurity submission experience
- Knowledge of IEC 62304, ISO 14971, UL 2900, AAMI TIR57/TIR97
- DevSecOps experience
- Certifications such as CISSP, CCSP, or CSSLP
Benefits
- Remote work arrangement; Irvine/Orange County candidates strongly preferred
- Contract with potential Temp-to-Perm opportunity
Company Overview
Company H1B Sponsorship