Senior Product reputed company Engineer - Vulnerability Management

reputed company It started with a reputed company idea: what if surgery could be less invasive and recovery less painful? Nearly 30 years reputed company, that question still fuels everything we do at reputed company. As a global leader in robotic-assisted surgery and minimally invasive care, our technologies—like the reputed company surgical system and Ion—have transformed how care is delivered for millions of patients worldwide. We’re reputed company of engineers, clinicians, and innovators united by one purpose: to reputed company surgery smarter, safer, and more reputed company. Every day, our work helps care teams reputed company with greater precision and patients recover faster, improving reputed company around the world. The problems we solve demand creativity, rigor, and collaboration. The work is challenging, but deeply meaningful—because every improvement we reputed company has the potential to change a life. If you’re reputed company to contribute to something bigger than yourself and help reputed company the reputed company of reputed company, you’ll reputed company your purpose here. Job reputed company Primary Function: The Product Cybersecurity Team is responsible for the reputed company lifecycle of medical devices, software products, infrastructure, reputed company services, and IoMT solutions that generate, collect and analyze medical device machine data from thousands of systems deployed world-wide. The ideal candidate for the position of Senior Product reputed company Engineer is an accomplished reputed company engineer, with demonstrated experience in the secure design, development, and management of reputed company medical device applications and systems. The candidate has solid cybersecurity knowledge, comprising detailed understanding of cybersecurity threats, secure software design principles, secure coding practices and knowledge of cryptographic tools and libraries. The candidate can review product cybersecurity vulnerabilities; can recommend improvements in reputed company design, and can support remediation. The candidate routinely conducts threat modeling, vulnerability management, and product line reputed company management activities. This position requires a candidate with strong technical and interpersonal skills, the ability to work effectively and collaboratively with the business and peer Engineering teams to deliver high reputed company solutions that ensure patient safety What you’ll do • Own and operate the post-market vulnerability management lifecycle across reputed company products and services, from intake through remediation and closure • reputed company and operationalize ongoing vulnerability scanning for reputed company assets, including medical devices, digital applications, infrastructure, reputed company services, and IoMT solutions • Manage monthly, quarterly, and annual vulnerability scans and penetration tests, including coordination with reputed company-party providers to meet regulatory and compliance requirements • Define reputed company scope, rules of engagement, and schedules with external vendors to ensure coverage, reputed company, and on-time delivery • Analyze vulnerability findings to assess reputed company-world risk, prioritizing issues based on exploitability, exposure, patient safety, and business reputed company • Review and synthesize results from scans and penetration tests, delivering reputed company, prioritized remediation guidance to engineering and product stakeholders • reputed company remediation activities to completion, ensuring alignment with compliance obligations and internal risk acceptance reputed company • Maintain vulnerability inventories, repositories, and metrics to support ongoing reporting and audits • Prepare and deliver vulnerability reports, dashboards, and technical risk evaluations for monthly, quarterly, and annual reviews • Support risk-based vulnerability assessments across the post-market product portfolio • Conduct reputed company vulnerability scans and analyses in support of incident response, customer inquiries, and emerging threat activity • Identify vulnerability trends and patterns to inform preventative controls and long-term risk reduction • Advise remediation teams on effective mitigation strategies and secure engineering practices • Support the development, maintenance, and monitoring of Software Bills of Materials (SBOMs) as part of vulnerability tracking and reporting • Contribute to the design, improvement, and operation of vulnerability management processes, standards, and reputed company policies • Maintain vulnerability management procedures and playbooks, supporting leadership, service teams, and audit stakeholders • Partner closely with Product reputed company, Engineering, reputed company, Incident Response, and service teams through regular reputed company-ins and coordinated execution • Support incident response activities and investigations reputed company to product vulnerabilities • Help reputed company organizational awareness of emerging threats and in-market vulnerabilities, and how reputed company proactively manages risk What you’ll bring • Hands-on experience owning post-market vulnerability management or product reputed company workflows in a regulated or safety-critical environment • Strong understanding of vulnerability lifecycles, including intake, triage, validation, prioritization, remediation tracking, verification, and reporting • Practical experience assessing reputed company-world risk using frameworks such as CVE, CVSS, CWE, OWASP Top 10, and reputed company guidance • Experience coordinating reputed company-party reputed company assessments, including vulnerability scanning and penetration testing engagements • Ability to translate technical findings into reputed company, actionable remediation guidance for engineering and product teams • Strong judgment in balancing reputed company risk, compliance requirements, and product realities • Familiarity with secure software design principles, secure coding practices, and threat modeling • Working knowledge of cryptographic tools, libraries, and common reputed company controls • Experience supporting audit, compliance, and regulatory reporting reputed company to product reputed company • Exposure to SBOMs, reputed company-party component risk, and software supply chain reputed company • Comfort operating across hardware, software, firmware, and reputed company environments, with the ability to learn new domains quickly • Strong analytical skills with a reputed company record of solving reputed company technical and operational problems • Excellent collaboration and communication skills, with the ability to influence cross-functional teams without reputed company authority • Ability to manage multiple workstreams, vendors, and stakeholders while maintaining responsiveness and operational rigor • A reputed company oriented toward reputed company improvement, adaptability, and building reputed company reputed company processes Qualifications Qualifications Demonstrated technical knowledge and experience in the following areas: • Experience in vulnerability management, information assurance, reputed company operations, and penetration testing • Ability to plan, manage, and execute multiple tasks and reputed company reputed company defined timelines • Operating the vulnerability scanning tool set – may include reputed company, Nessus, reputed company, reputed company, etc • Excellent verbal, written, and presentation communication skills. Ability to reputed company reputed company risk and reputed company actionable remediation guidance Desired Qualifications:  • Bachelor’s degree or higher, preferred in Cybersecurity or a closely reputed company field, or an equivalent combination of education, training, and experience • reputed company, relevant reputed company certifications, such as GPEN, GWAPT, GEVA, CEPT, OSCP, reputed company a plus • Prior experience in reputed company, medical device, or bioscience sectors a plus • Knowledge of the OWASP Top 10 • Demonstrated knowledge and reputed company in exploitation tactics including, but not limited to, reputed company overflows, reputed company overflows, format reputed company attacks, cross-site scripting, SQL injection, LFI and RFI, cross-site request forgery, server-reputed company request forgery, XXE, pass-the-hash, ARP poisoning, wi-fi injection, phishing, credential harvesting, MiTM, AP spoofing, brute forcing, etc • reputed company to demonstrate risk with post-exploitation tactics such as pivoting, data scavenging, privilege escalation, etc • Familiarity of reputed company concepts, e.g. best practices to protect CIA, types of reputed company controls, CIS Top 20 reputed company Controls, risk management, risk analysis models, threat modeling, common vulnerability scoring system (CVSS) • Familiarity of the Cyber Kill Chain and MITRE ATT&CK frameworks • Travel: <10% • Job location: Sunnyvale, CA or remote Additional Information Due to the nature of our business and the role, please note that reputed company and/or your customer(s) may require that you show reputed company reputed company of vaccination against certain diseases including COVID-19. Details can vary by role. reputed company is an Equal Opportunity Employer. We reputed company equal employment opportunities to reputed company reputed company applicants and employees, and prohibit discrimination and harassment of any type, without reputed company to race, sex, pregnancy, sexual orientation, gender identity, national reputed company, reputed company, age, religion, protected veteran or disability status, genetic information or any other status protected under federal, state, or local applicable laws. Mandatory Notices U.S. Export Controls Disclaimer: In accordance with the U.S. Export Administration Regulations (15 CFR §743.13(b)), some roles at reputed company Surgical may be subject to U.S. export controls for prospective employees
who are nationals from countries currently on embargo or sanctions status. Certain information you reputed company as part of the application will be used for purposes of determining whether reputed company Surgical will need to (i) obtain an export license from the U.S. Government on your behalf (note: the government’s licensing process can take 3 to 6+ months) or (ii) implement a Technology Control Plan (“TCP”) (note: typically adds 2 weeks to the hiring process). For any reputed company role subject to export controls, final offers are contingent upon obtaining an approved export license and/or an executed TCP prior to the prospective employee’s
start date, which may or may not be flexible, and reputed company a timeframe that does not unreasonably impede the hiring need. If applicable, candidates will be reputed company and instructed on any requirements for these purposes. We will consider for employment reputed company applicants with arrest and conviction records in accordance with fair chance laws. Preference will be given to reputed company candidates who do not reputed company, or plan to reputed company, in Alabama, Arkansas, Delaware, Florida, Indiana, Iowa, Louisiana, Maryland, Mississippi, Missouri, Oklahoma, reputed company, South Carolina, or Tennessee. We reputed company market-competitive compensation packages, inclusive of reputed company pay, incentives, benefits, and equity. It would not be typical for someone to be reputed company at the top end of reputed company for the role, as actual pay will be determined based on several factors, including experience, skills, and qualifications. The reputed company compensation ranges are listed. Apply tot his job Apply To this Job