Note: The job is a remote job and is open to candidates in USA. Avenue 45 is seeking a Product Security Engineer specializing in Medical Devices and FDA regulations. The role involves providing technical security expertise and supporting cybersecurity activities across product development and product-supporting systems, ensuring alignment with security policies and regulatory expectations.
Responsibilities
- Work closely with the Cybersecurity Product Security team to support enterprise product security initiatives and cybersecurity programs
- Provide technical product security leadership across product and R&D application development teams
- Translate security requirements, architecture, and risk assessments into actionable design and implementation guidance
- Review product and platform architectures, designs, and prototypes to ensure alignment with information security policies, standards, and guidelines
- Support secure-by-design principles throughout the product development lifecycle (SDLC)
- Participate as a product security subject matter expert in product development team meetings and design reviews
- Assist with and perform vulnerability assessments of products and product-supporting systems
- Support vulnerability scanning, reassessment, remediation validation, and patch/update tracking
- Collaborate with development teams and the Cybersecurity Product Security team to address identified security risks and vulnerabilities
- Serve as a security advisor to product, R&D, regulatory, quality, and commercial teams
- Support customer- and partner-facing product cybersecurity discussions
- Collaborate closely with the Cybersecurity Product Security team, GRC, and broader information security teams to ensure consistent application of cybersecurity standards and practices
- Participate in security reviews, risk assessments, and cybersecurity governance activities related to product development and product-supporting environments
- Stay current on product cybersecurity threats, trends, emerging attack techniques, and regulatory expectations
- Share security best practices, lessons learned, and secure development guidance with engineering teams
- Contribute to the continuous improvement of product security processes, standards, and tools
Skills
- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field, or equivalent experience
- Min 6 – 8 years of experience with IT Security or Cybersecurity or related area
- Min 2 years of experience in product security, application security, or cybersecurity supporting software-based products in medical devices area
- Experience working in regulated environments. (FDA)
- Experience collaborating with cybersecurity, product security, engineering, and cross-functional business teams
- Strong understanding of secure architecture, application security, secure software development, and vulnerability management
- Familiarity with web applications, cloud platforms (AWS/Azure), Windows, and Linux
- Excellent communication skills and ability to work effectively across technical and business functions
- Self-motivated and able to operate with minimal supervision
- Ability to quickly understand complex product architectures and security requirements
- Familiarity with FDA medical device cybersecurity guidance and industry standards such as IEC 81001-5-1, AAMI TIR57/TIR97, or NIST SSDF
Benefits
- Remote contractor position
- 1099 or Corp-to-Corp base contract
- No w-2 contracts
- Must be able to pass and clear background check and Drug Test prior to starting
Company Overview