Responsable de definir e implementar controles de seguridad en el SDLC, así como de validar el cumplimiento de controles de seguridad en proyectos nuevos y aplicaciones e identificar los riesgos de seguridad de la información y coordinar la remediación con los equipos involucrados.
Responsibilities
Definir e implementar mejoras a controles de seguridad aplicativa en todo el ciclo de desarrollo seguro y devsecops.
Implementación de controles de seguridad y configuración de mejores prácticas de Seguridad en base a la arquitectura institucional.
Ejecutar las pruebas de seguridad de aplicaciones Estáticas y participar en las pruebas de seguridad Dinámicas y Pentest.
Verificar el cumplimiento de controles de seguridad en las aplicaciones, así como el cumplimiento regulatorio aplicable.
Afinación y personalización de configuraciones de seguridad en herramientas de Seguridad relacionadas con Aplicaciones.
Lead product threat modeling activities and maintain cybersecurity architecture, drive secure development practices, oversee security validation activities, and support global regulatory and post-market cybersecurity requirements for medical device products deployed in clinical environments.
Compensation
Medtronic offers a competitive Salary and flexible Benefits Package
Responsibilities
Lead product threat modeling activities and maintain cybersecurity architecture, attack analyses, and security risk assessments throughout the product lifecycle.
Define security requirements and conduct design reviews for software features, system integrations, and third-party components.
Establish and maintain secure Windows platform configurations, including operating system hardening, application control, secure boot, encryption, and access management.
Integrate cybersecurity requirements into the software development lifecycle through secure coding practices, security testing, vulnerability scanning, and CI/CD security controls.
Manage Software Bill of Materials (SBOM) processes, third-party component inventories, and vulnerability monitoring activities.
Requirements
Bachelor's degree
Nice to have: regulated medical devices under IEC 62304, ISO 14971, ISO 13485, IEC 81001-5-1, or AAMI TIR57 requirements
Lead and own the cybersecurity of the CathWorks platform medical device, ensuring secure development, hardening, verification, and post‑market vulnerability management.
Compensation
Medtronic offers a competitive Salary and flexible Benefits Package
Responsibilities
Lead product threat modeling activities and maintain cybersecurity architecture, attack analyses, and security risk assessments throughout the product lifecycle.
Define security requirements and conduct design reviews for software features, system integrations, and third‑party components.
Establish and maintain secure Windows platform configurations, including operating system hardening, application control, secure boot, encryption, and access management.
Integrate cybersecurity requirements into the software development lifecycle through secure coding practices, security testing, vulnerability scanning, and CI/CD security controls.
Manage Software Bill of Materials (SBOM) processes, third‑party component inventories, and vulnerability monitoring activities.
Review and analyze OEM-developed software documentation, code, and test reports to ensure compliance with security and quality standards.
Compensation
The projected annual compensation range for this position is $100,000 - $140,000 (USD).
Responsibilities
Review all aspects of OEM-developed software including source code, repository structures, and related technical deliverables
Review contractor-submitted Contract Data Requirements Lists (CDRLs) including SVDs, SDPs, SDDs, and test execution reports
Review outputs from Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools for critical vulnerabilities and adherence to coding standards
Evaluate dynamic code analysis results, memory management metrics, and automated unit, integration, and regression test suites
Review structural code coverage reports to assess metrics, ensuring thorough validation of avionics systems before deployment
Requirements
BS/BA degree in Computer Science or Engineering field from an ABET accredited college program
Nice to have: Strong interpersonal skills
Nice to have: Presentation skills
Nice to have: Experience delivering presentations to executives and senior management
Lead product security for Vecima’s software and hardware platforms, driving threat modelling, secure design, and vulnerability management across embedded Linux and cloud‑connected products.
Locations (2)
United States
Canada
Responsibilities
Identify and reduce security risk throughout the product lifecycle
Lead threat modelling for new products and architecture changes
Translate security risks into engineering requirements
Coach developers and architects in secure design and coding
Improve secure product development through risk‑based activities and automated CI/CD checks
Automation/DevOps Engineers focus on scripting, templating, and pipeline design to automate builds, deployments, testing, and compliance checks within a cloud-native AWS-hosted ecosystem.
Compensation
The proposed salary range for this position is: $108,400 - $227,500 USD
Responsibilities
Scripting, templating, and pipeline design to automate builds, deployments, testing, and compliance checks
Develop reusable templates for different project types to ensure consistent and secure CI/CD pipelines
Work with Configuration Manager to develop processes for versioning, branching, and tagging
Reduce drift in test and production environments using configuration management tools
Provide escalation support for cloud-related incidents and service requests
Set the technical direction for Security Engineering and lead an organisation of approximately 15–20 engineers, including engineering managers and senior individual contributors. Shape how security is built into everyday development.
Responsibilities
Define and deliver a security engineering roadmap across infrastructure, backend, frontend, and mobile systems.
Embed automated security checks and secure defaults into development and CI/CD workflows, reducing reliance on manual decisions.
Improve the tools and observability engineers use to detect, investigate, and respond to security threats.
Use generative AI and agentic development tools to help teams detect and fix security issues more efficiently, with appropriate safeguards.
Lead and develop engineering managers and senior individual contributors, building a strong technical organisation of approximately 15–20 engineers.
System Analyst IIISimVentions, Inc · Patuxent River, US
DevSecOps Senior Automation Platform EngineerCaci · Aberdeen Proving Ground, US
Senior Security Software Engineer/DeveloperVecima Networks Inc. · Remote, US+1 more
Application Security EngineerArdent · Remote