What are the responsibilities and job description for the Product Security Engineer II position at Bracco Medical Technologies?
Product Security Engineer II
Message
Share
Why Join Bracco Medical Technologies?
At Bracco Medical Technologies, every employee has an impact on our Mission to empower lifesaving
decisions. We create medical devices that give healthcare providers the
insights they need to confidently and safely diagnose patients. Our unique line
of products includes Intravascular Ultrasound (IVUS), Fractional Flow Reserve
FFR), Cardiovascular Imaging contrast delivery (CVi), and CT and MRI contrast
delivery systems.
Position Description
Position Summary :
As a member of Bracco Medical Technologies (BMT)'s Product Security Team, this role is responsible for driving the maturity of BMT's vulnerability management and incident response program.
This role provides the opportunity to work cross functionally with a variety of stakeholders, including product development teams, service, and sales, and contribute to product security team deliverables and activities both at the post market and premarket stage such as threat modeling, security testing and security risk management.
Primary Duties & Responsibilities :
- Engage in security research and develop tooling to enhance the post market product security capability to detect and risk assess security vulnerabilities.
- Generate and manage Software Bill of Materials (SBOM) across multiple platforms
- Detect and triage root cause and risk assess vulnerabilities found in SBOMs communicating across multiple functions in order to drive remediations on vulnerabilities detected.
- Architect solutions to remediate post market security vulnerabilities and engage cross functional stakeholders for remediation planning.
- Be part of PSIRT team, lead CVD and incident response on BMT products.
- Supports the integration of incident response and vulnerability management process into the Quality Management System.
- Develop training for cross functional stakeholders engaged in the Incident Response and Vulnerability Management Process and conduct tabletop exercises.
- Partner with the product and software engineering teams in premarket security activities to assist with design reviews, threat modeling, penetration testing, code reviews, security issues remediation, and other security related activities.
- Support software developers, system engineers and hardware / firmware engineers across business units on their premarket security practices and provide guidance regarding mitigations to emerging threats and remediation planning.
- Other duties and responsibilities as required to support the changing security needs of the organization.
Qualifications (Knowledge, Skills & Abilities) :
Qualifications (Knowledge, Skills & Abilities) :
Minimum
Preferred
Other
Compensation & Total Rewards :
Estimated Starting Salary Range : $110,000 - $120,000
Total Rewards :
Job Location
7905 Fuller Road, Eden Prairie, Minnesota
Tracking Code
1348-432
Salary : $110,000 - $120,000
