Senior Product Security Engineer (R&D)

Essential Duties & Responsibilities 

• Performs cybersecurity engineering functions within a scheduled timeframe and performance criteria 

• Identify areas to improve our product to better align with FDA cybersecurity guidance and standards such as NIST Risk Management Framework, UL 2900, AAMI TIR 57 and Joint Security Plan (JSP). 

• Review corporate cybersecurity guidelines and incorporate into process and development efforts for our group. Identify opportunities for modifications to the software applications to improve cybersecurity threat protection profile. 

• Assist with efforts to create SBOMs for several software components and establish ongoing surveillance techniques. Evaluate tools to assist with this effort. 

• Assist with efforts to establish penetration testing suites for continuous testing and monitoring of our product solution. 

• Assist with efforts to establish a software update process to test and deploy Windows OS security patches. 

• Provide SecureLink support in terms of customer requirements for connecting and addressing cybersecurity concerns. 

• Provide overall guidance and answer customer questions regarding cybersecurity concerns with the deployment of our product solution. 

• Support Remote Diagnostic efforts by defining cybersecurity mitigations for connecting remotely to customers using IoT agents and Azure infrastructure. 

• Engineering documentation: Responsible for engineering documentation of software specifications, designs, modifications and technical procedures  

 Qualifications 

• Position is based in Marlborough, MA. In office work of 50% or greater is preferred. 

• Thorough familiarity with FDA Cybersecurity Guidelines and cybersecurity standards such as NIST Risk Management Framework, UL 2900, AAMI TIR 57 and Joint Security Plan (JSP). 

• Ability to evaluate and define cybersecurity solutions  

• Ability to communicate effectively & constructively 

• Ability to work independently on all tasks 

• Strong written communication skills 

• Strong interpersonal skills 

• Thorough familiarity with Windows operating system is required. 

• Software engineering skills are desired. 

• Knowledge of cloud-based software development and deployment is desired. 

Experience 

• Minimum of 8 years professional experience in network/software/cybersecurity development. 

• Skilled in writing design documentation and operating procedures 

• Experience working in an FDA regulated environment is a plus 

Education 

• BS/BA required in Computer Science, Computer Engineering, Electrical Engineering, or equivalent 

• MS a plus 

Why Hologic?

We are committed to making Hologic the company where top talent comes to grow. For you to succeed, we want to enable you with the tools and knowledge required and so we provide comprehensive training when you join as well as continued development and training throughout your career.

If you have the right skills and experience, apply today!

#LI-RF1 #Mid-level

Agency and Third Party Recruiter Notice:

Agencies that submit a resume to Hologic must have a current executed Hologic Agency Agreement executed by a member of the Human Resource Department. In addition Agencies may only submit candidates to positions for which they have been invited to do so by a Hologic Recruiter.  All resumes must be sent to the Hologic Recruiter under these terms or they will not be considered.

Hologic, Inc. is proud to be an Equal Opportunity Employer inclusive of disability and veterans.