Job: Security Engineer
Location: Limerick
Working Model: Hybrid 2-3 days a week
Salary: 50,000 - 55,000
Type: Permanent
Level Mid
Security is the key component across all products we develop, and we must continually ensure the security mindset culture and philosophy is integrated into all security practices within our development processes. Ensuring security and privacy for our customers, clients and their patients is a key mantra in all our work. We achieve this by making everyone accountable for security and strive to continually enhance and improve our Security mindset culture. We require and encourage collaboration and Candor between teams and management and you should be a positive, forward-looking individual. This role provides the scope to lead and enhance security for our next generation of products, while ensuring the current products are kept secure, to deal with the constant changes in the threat landscape.
We are working with one of the largest global medical technology companies in the world. You will work alongside inspirational leaders in a positive and innovative culture. As the Product Security Engineer, you will be responsible for the implementation of security requirements and secure coding standards, e.g., NIST SP 800-53, OWASP, and MS Secure Coding Standards. Evaluate product designs and provide solutions to remediate security vulnerabilities through product security risk assessments, vulnerability scans, and static and dynamic code analysis tools. In addition to defining security requirement for new product development, the role requires you to support teams in the remediating vulnerabilities with existing products.
Your main responsibilities will include:
-
Support teams in reducing product risk, by finding practical solutions on how to increase security in new and existing products
-
Work in a team supporting R&D in implementing secure software solutions by ensuring architecture is in accordance with industry accepted standards for medical device security including encryption, disaster recovery, authentication, audit logging, hardening measures, patch management, and vulnerability monitoring.
-
Assist in product security risk assessments and provide vulnerability remediation guidance to product development software engineers both on and off-site.
-
Develop and ensure software engineering procedures are aligned with product security requirements
-
Supporting the Product Security Documentation process including:
-
Providing standardized Product Security documentation
-
Organize and support the document review and approval process
-
Ensure that deliverables are delivered punctually and to the required level of quality
-
Interface and oversee product security aspects of technical departments such as Systems Hardware, Quality, and technical services
-
Collaborate with other teams/engineers to ensure effective design and implementation goals.
-
Assure adherence to development policies and software quality procedures
We are looking for people with this type of background:
- BS degree in Computer Science, Computer Engineering, Electrical Engineering, other related engineering field or equivalent work experience required
- Ideally over 3 years of experience in areas such as IT-Security, secure software development and designs, and risk management
- Working experience with various encryption algorithms and PKI solutions
- Understanding of security issues and solutions for embedded devices
- Good understanding of networking and related security aspects and common attacks
- Demonstrated understanding of developing in a regulated environment and adhering to a quality management system
- Excellent written and verbal communication and interpersonal skills are essential
- Demonstrated positive work ethic with a strong commitment to achieving project goals
- Good understanding of Microsoft Office products and tools
- Ideally some experience with Dynamic and static code analysis tools
- Ideally some knowledge of Completing a track Trace and plan using a Security Requirements Traceability Matrix (SRTM) or similar tool with the goal of tracking
- Some understanding of vulnerability scans and static code analysis results
- Some understanding proper secure coding practices to drive standards within the software engineering organization
- Ideally have a recognized Security certifications are a plus (CISSP, CASP+, CSSLP etc.)
This is a great opportunity to work along side some of the brightest minds in the sector, there is excellent career potential with an ability to learn in an unrivalled learning environment. If you would like to be considered, please submit your CV to the link provided now for immediate assessment.
