Lead Senior Software Engineer - Cyber/Product Security
The company is looking for a talented Senior Software Engineer to be part of a team responsible for implementing a product security framework supporting existing and future medical instrumentation and software. The right candidate is a positive, forward-looking person who must be self-directed requiring minimal daily direction, collaborates often and effectively with project team members, presents a positive and professional demeanour with customers, and excels at solving difficult problems.
The candidate will need to possess software development skills specifically related to implementation of security requirements and secure coding standards, e.g., NIST SP 800-53, ISO/IEC 27001, OWASP, SEI CERT, and MS Secure Coding Standards. The candidate shall be able to evaluate product designs and provide solutions to remediate security vulnerabilities through product security risk assessments, vulnerability scans, and static code analysis. In addition to security solutions for new product development, the role requires remediating vulnerabilities with existing products which requires detailed attention to implementation and product risk. The Product Security Software Engineer will participate in a full medical software development life cycle and adhere to a quality management system.
DUTIES AND RESPONSIBILITIES:
- Lead product security risk assessments, hazard analysis, and provide vulnerability remediation guidance and mentoring to product development software engineers.
- Implement software security solutions and architect/design products in accordance with industry accepted standards for medical device security including: encryption, recovery, authentication, audit logging, hardening measures, patch management, vulnerability monitoring, and antivirus/antimalware.
- Develop and administer software engineering procedures and training for vulnerability scans and static code analysis
- Assist product development teams in creating Incident and Vulnerability Management Plans and Product Security White Papers
- Participate on product security incident response teams.
- Interface with other technical departments such as Penetration Testing Team, Systems and Hardware Engineering
- Interface with Quality and Technical Service
- Demonstrate proper secure coding practices driving standards within the software engineering organization
- Collaborate with resources to ensure effective design and implementation goals.
- Lead technical design reviews and code inspections. Provide clear, actionable feedback for project team members
- Assure adherence to BDDS development policies and software quality procedures
- BS degree in Computer Science, Computer Engineering, Electrical Engineering, or other related engineering field is required
- Minimum of 5 years of experience in software development, systems & architecture concepts and designs
- Minimum of 5 years' work experience in product development
- Minimum of 5 years' work experience with C#/.NET development
- Minimum of 3 years' work experience using secure coding practices
- Experience with TCP/IP, encryption, and socket development
- Knowledge of Windows networking fundamentals (IP protocol, switches, routers)
- Demonstrated understanding of developing in a regulated environment and adhering to a quality management system
- Excellent written and verbal communication and interpersonal skills are essential
- Demonstrated positive work ethic with a strong commitment to achieving project goals
- Experience working in a regulated (FDA) environment with medical instrumentation is a plus
- Candidate for or certification in InfoSec Security are a plus, e.g., CISSP, CSSLP
- Experience with static code analysis tools
- Work experience in network security strongly desired
For further information on this Lead Senior Software Engineer role in Limerick please contact Ros Lomasney on 021 2066287 / email@example.com
Check out all our open jobs on our HERO Recruitment website - www.hero.ie
Please Note: HERO Recruitment will not forward your details to any company without your prior approval