Description

You will support cybersecurity reviews of products and applications, integrating security requirements into development processes.

This role is on-site.

Responsibilities

• Participate in architecture and design discussions to identify security risks and recommend mitigations.
• Conduct threat modeling activities and review vulnerability assessment, penetration testing, SAST, and DAST findings.
• Collaborate with product owners and engineers to integrate security standards and best practices.
• Support risk assessments, compliance tracking, and governance meetings.
• Evaluate cybersecurity controls and monitor remediation efforts.

Required Skills

• 9+ years of experience in cybersecurity, information security, or product security roles.
• Knowledge of cybersecurity frameworks including NIST, ISO 27001, PCI DSS, SOC 2, Basel II, HIPAA, HITRUST, and SOX.
• Experience working with software development or product engineering teams.
• Understanding of cloud technologies, web applications, APIs, and modern software architectures.
• Familiarity with identity and access management, secure software development, network security, and cryptography.
• Ability to communicate cybersecurity risks to technical and non-technical audiences.
• Strong analytical, organizational, and problem-solving skills.

Preferred Skills

• Experience supporting medical devices, healthcare technologies, IoT products, or mobile applications.
• Familiarity with vulnerability management, penetration testing results, and SAST/DAST tools.
• Knowledge of regulatory requirements such as HIPAA and medical device cybersecurity guidance.

Key Skills

Education

Bachelor's degree