Product Security Engineer

4 weeks ago

ireland Becton, Dickinson and Company Full time

Job Description Summary
Security is the key component across all products we develop, and we must continually ensure the security mindset culture and philosophy is integrated into all security practices within our development processes. Ensuring security and privacy for our customers, clients and their patients is a key mantra in all our work. We achieve this by making everyone accountable for security and strive to continually enhance and improve our Security mindset culture. We require and encourage collaboration and candor between teams and management and you should be a positive, forward-looking individual. This role provides the scope to lead and enhance security for our next generation of products, while ensuring the current products are kept secure, to deal with the constant changes in the threat landscape.


Job Description


We are the makers of possible
BD is one of the largest global medical technology companies in the world. Advancing the world of health is our Purpose, and it's no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities.


Why join us?
A career at BD means learning and working alongside inspirational leaders and colleagues who are equally passionate and committed to fostering an inclusive, growth-centered, and rewarding culture. You will have the opportunity to help shape the trajectory of BD while leaving a legacy at the same time.


To find purpose in the possibilities, we need people who can see the bigger picture, who understand the human story that underpins everything we do. We welcome people with the imagination and drive to help us reinvent the future of health. At BD, you'll discover a culture in which you can learn, grow and thrive. And find satisfaction in doing your part to make the world a better place.


Become a maker of possible with us


About the role:
As the Product Security Engineer you will be responsible for the implementation of security requirements and secure coding standards, e.g., NIST SP 800-53, OWASP, and MS Secure Coding Standards. Evaluate product designs and provide solutions to remediate security vulnerabilities through product security risk assessments, vulnerability scans, and static and dynamic code analysis tools. In addition to defining security requirements for new product development, the role requires you to support teams in remediating vulnerabilities with existing products.


Main responsibilities will include:

  1. Support teams in reducing product risk, by finding practical solutions on how to increase security in new and existing products.
  2. Work in a team supporting R&D in implementing secure software solutions by ensuring architecture is in accordance with industry-accepted standards for medical device security including encryption, disaster recovery, authentication, audit logging, hardening measures, patch management, and vulnerability monitoring.
  3. Assist in product security risk assessments and provide vulnerability remediation guidance to product development software engineers both on and off-site.
  4. Develop and ensure software engineering procedures are aligned with product security requirements.
  5. Support the Product Security Documentation process including:
    1. Providing standardized Product Security documentation.
    2. Organizing and supporting the document review and approval process.
    3. Ensuring that deliverables are delivered punctually and to the required level of quality.
    4. Interface and oversee product security aspects of technical departments such as Systems Hardware, Quality, and technical services.
    5. Collaborate with other BD resources to ensure effective design and implementation goals.
    6. Assure adherence to BD development policies and software quality procedures.

About you:

  • BS degree in Computer Science, Computer Engineering, Electrical Engineering, other related engineering field or equivalent work experience required.
  • Minimum of 3 years of experience in areas such as IT-Security, secure software development and designs, and risk management.
  • Working experience with various encryption algorithms and PKI solutions.
  • Understanding of security issues and solutions for embedded devices.
  • Good understanding of networking and related security aspects and common attacks.
  • Demonstrated understanding of developing in a regulated environment and adhering to a quality management system.
  • Excellent written and verbal communication and interpersonal skills are essential.
  • Demonstrated positive work ethic with a strong commitment to achieving project goals.
  • Good understanding of Microsoft Office products and tools.

In addition to the above skills, the following skillset would be advantageous but not essential:

  • Experience with Dynamic and static code analysis tools.
  • Knowledge of completing a track Trace and plan using a Security Requirements Traceability Matrix (SRTM) or similar tool with the goal of tracking Security Requirements.
  • Understanding of vulnerability scans and static code analysis results.
  • Understanding proper secure coding practices to drive standards within the software engineering organization.
  • Experience working in a regulated (FDA, MDR) environment with medical instrumentation.
  • Basic understanding of network security fundamentals (IP protocol, firewalls etc.).
  • Recognized Security certifications are a plus (CISSP, CASP+, CSSLP etc.).

Click on apply if this sounds like you


Becton, Dickinson and Company is an Equal Opportunity/Affirmative Action Employer. We do not unlawfully discriminate on the basis of race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, or any other protected status.


To learn more about BD visit: https://bd.com/careers

#J-18808-Ljbffr

  • Lead Product Security Engineer

    4 weeks ago

    ireland Tricentis Full time

    Responsibilities:Drive security roadmap for SSDLC adoption across product portfolio, implementing security practices in alignment with DevSecOps principlesEstablish guidelines and architectural principles based on industry best practices for both cloud-native and on-premise solutionsPartner with Engineering, DevOps and SRE and collaborate on cross functional...

  • Product Security Architect

    4 weeks ago

    ireland Gong.io Full time

    Gong transforms revenue organizations by harnessing customer interactions to increase business efficiency, improve decision-making, and accelerate revenue growth. The Revenue Intelligence Platform uses proprietary artificial intelligence technology to enable teams to capture, understand, and act on all customer interactions in a single, integrated platform....

  • Security Software Engineer

    4 weeks ago

    ireland Microsoft Corporation Full time

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified...

  • Senior IT Security Engineer

    4 weeks ago

    ireland MACOM Technology Solutions Holdings Full time

    Company Overview:MACOM designs and manufactures semiconductor products for Data Center, Telecommunication and Industrial and Defense applications. Headquartered in Lowell, Massachusetts, MACOM has design centers and sales offices throughout North America, Europe and Asia. MACOM is certified to the ISO9001 international quality standard and ISO14001...

  • Senior Application Security Engineer

    4 weeks ago

    ireland GemPool Recruitment Full time

    Get AI-powered advice on this job and more exclusive features.Senior Application Security Engineer at GemPool RecruitmentGemPool is a specialised IT recruitment agency that provides top IT jobs.We are currently hiring for one of our clients for the position of Senior Application Security Engineer. This is a full-time opportunity to play a pivotal role in...

  • IT Security Engineer

    3 weeks ago

    Ireland Reperio Human Capital Full time

    IT Security Engineer 101056 Desired skills: Security Engineer, Cloud Security, Penetration Testing, Threat Intelligence, Vulnerability Scanning Remote (Munster, Ireland) / 6-month contract My client is seeking a highly skilled and motivated IT Security Engineer to join their dynamic team in the financial services sector. The role will be for an...

  • Senior Application Security Engineer

    4 weeks ago

    ireland Brightflag Full time

    The OpportunityAs an Application Security Engineer at Brightflag, you will play an integral role in the success of our engineering team and help ensure that features are delivered securely. We have a number of high-profile customers across Europe, the US, and Australia, and we are growing quickly. Our engineers take ownership of their work, solve complex...

  • Security Engineer, AWS Security

    3 weeks ago

    ireland Amazon Full time

    Come and build innovative services that protect our cloud from advanced security threats!As a Security Engineer on our team, you'll help build and manage services that detect and automate the mitigation of cybersecurity threats across Amazon's infrastructure, including advanced persistent threats. You'll work with data scientists, software development...

  • Senior Security Engineer, AWS Security

    3 weeks ago

    ireland Amazon Full time

    Come and build innovative services that protect our cloud from advanced security threats!As a Senior Security Engineer on our team, you'll help build and manage services that detect and automate the mitigation of cybersecurity threats across Amazon's infrastructure, including advanced persistent threats. You'll work with data scientists, software development...

  • Senior Application Security Engineer

    4 weeks ago

    ireland Malwarebytes Full time

    DescriptionMalwarebytes believes that when people and organizations are free from threats, they are free to thrive. Founded in 2008, CEO Marcin Kleczynski had one mission: to rid the world of malware. Today, Malwarebytes has grown beyond malware remediation to ensuring cyberprotection for everyone, providing device protection, privacy, and prevention...

  • Commissioning Engineer

    4 days ago

    Ireland Securitas Security Service Full time

    Securitas Technology Ireland are currently recruiting for a Commissioning Engineer This position will require travel within Ireland and EMEA. Role Purpose The role of the Commissioning Engineer is to support the project managers to control, deliver and commission high end security systems to the highest industry standards. You will be responsible for...

  • Senior Offensive Security Engineer

    4 weeks ago

    ireland Tree Trust Full time

    Global IT, Security, & Business Systems, Amsterdam, Netherlands / Dublin, IrelandSurveyMonkey is the world’s most popular platform for surveys and forms, built for business—loved by users. We combine powerful capabilities with intuitive design, effectively serving every use case, from customer experience to employee engagement, market research to payment...

  • Security Engineer, Detection, Security Surveillance

    4 weeks ago

    ireland Google Full time

    Minimum qualifications:Bachelor's degree or equivalent practical experience.2 years of experience with security assessments or security design reviews or threat modeling.2 years of experience with security engineering, computer and network security and security protocols.2 years of coding experience in one or more general purpose languages.Preferred...

  • Senior Application Security Engineer

    3 weeks ago

    ireland Poppulo Full time

    Are you searching for an opportunity to play a key role in driving the dramatic growth of a highly successful software company?At Poppulo, we’re working on what’s next in communications and workplace technology. As a pioneer in this industry, we understand that meaningfully reaching every employee is hard. And so is managing office space in a hybrid...

  • Electronic CCTV Alarms Security Engineer

    6 days ago

    Ireland Elk Recruitment Limited Full time

    Position:Electronic CCTV Alarms Security Engineers Nationwide Location:Nationwide Salary:Negotiable DOE The Job: Elk are currently recruiting for Security Installation Engineers for our clients who are providers of premium security solutions dedicated to protecting small, mid-size and large companies with the latest products and services designed to control...

  • Security Installation Engineers Nationwide

    2 weeks ago

    Ireland Elk Recruitment Full time

    Position: Security Installation Engineer, CCTV, Alarms, AccessLocation: Ireland, NationwideSalary: €45,000 - €50,000 +, Vehicle, salary is subject to experienceAre you looking to progress your career within the Security Industry in Ireland?Elk is currently recruiting for Security Installation Engineers for a number of prestigious Security Firms across...

  • Senior Offensive Security Engineer

    4 weeks ago

    ireland HubSpot Full time

    POS-26030The HubSpot Threats and Vulnerabilities team protects our customers by systematically reducing HubSpot's attack surface and improving the maturity of HubSpot's Product Security. We create this path forward by mapping out HubSpot's defences, identifying and prioritizing improvements based on threat intelligence, and testing our applications and...

  • Security Engineer, Investigations

    4 weeks ago

    ireland Squarespace Full time

    Squarespace is looking for a Security Engineer with a focus on Investigations and Incident Response to join a dedicated team responsible for monitoring and responding to attacks on our platform. You'll partner with teams across the organization as you investigate security events specific to our platform and corporate environment.This is a hybrid role working...

  • Senior Application Security Engineer Ireland

    4 weeks ago

    ireland Tbwa ChiatDay Inc Full time

    As an Application Security Engineer at Brightflag, you will play an integral role in the success of our engineering team and help ensure that features are delivered securely. We have a number of high-profile customers across Europe, the US, and Australia, and we are growing quickly. Our engineers take ownership of their work, solve complex problems...

  • Lead Security Engineer

    4 weeks ago

    ireland JPMorgan Chase & Co. Full time

    Job DescriptionTake on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.As a Lead Security Engineer at JPMorgan Chase within Corporate Technology, you are an integral part...