Job Search
We can help you build an exceptional career
Product Security Architect/Lead IRC238285
| Job: | IRC238285 |
| Location: | Poland - Krakow |
| Designation: | Senior Software Engineer |
| Experience: | 5-10 years |
| Function: | Engineering |
| Skills: | cyber security, Embedded security, Security |
| Work Model: | Remote |
Description:
You will be a part of the client team and will work together with software developers, DevOps, engineers, and other cybersecurity engineers. The project itself is within the Healthcare domain.
Requirements:
Product Security Architect/Lead
- Strong knowledge in cybersecurity domain
- Strong knowledge of secure development processes (like SSDF)
- Experience with CI/CD and vulnerability scanning tools
- Ability to troubleshoot and analyse vulnerabilities
- Experience with creating security documentation, threat models, risk management plan
- Understands medical related regulations
- Programming/scripting experience
- Software architecrure design and reviews
- Support development team in security decisions
- Defining the roadmap and planning security activities in the development process
Qualifications:
• Bachelor’s or master’s degree in computer science, Informa.on Security, or a related field.
• Professional cer.fica.ons in informa.on security (e.g., CISSP, CISM) are highly desirable.
• Extensive experience in product security, par.cularly in the design and implementa.on of
security solu.ons for medical devices or related healthcare technology.
• Deep understanding of healthcare regula.ons and standards affec.ng medical device security.
• Proficiency in security architectures, encryp.on technologies, iden.ty and access and network
security etc.
• Experience with risk management methodologies and security assessment tools.
• Strong analy.cal and problem-solving skills.
• Product security processes, tools and techniques especially implementa.on aspects
• Excellent communica.on and interpersonal skills, with the ability to explain complex security
concepts to non-technical stakeholders.
Preferred qualifications:
• Knowledge in reference architecture and design pa^erns as applicable to medical technologies
and products
• Working knowledge in So=ware engineering and programming languages (Java, Python,
C/C++/C# etc.)
• Implementa.on and adop.ons of security frameworks such as SABSA /TOGAF frameworks
• Emerging medical technologies (AI, Blockchain, MIoT, RPA, etc.) and their security threats/risks
Job Responsibilities:
Manage and implement security in assigned products
• Understanding of the clinical use cases for software as a medical device (SaMD) and software in a medical device (SiMD)
• Performing architecture reviews as part of product security process resulting in a product security architecture.
• Building threat model and security risk assessments with prioritized items to be mitigated
• Being a technical lead and guidance for product teams driving implementation of core security assets.
• Developing security requirements and security use cases to address clinical environment
• Influencing product features and roadmaps
• Developing/contributing success criteria for security product/solution testing
• Managing the requirements to realize security certification/regulatory documentation
• Collaborating with product development team and cross-functional stakeholders.
• Building capabilities, tools, and help automate where possible driving improvements to Alcon product security process and practices
• Leading vulnerability analysis, core engineering assets in alignment with the security vision
What We Offer
Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people’s lives.
Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.
DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.
Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.
Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.
Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.