Senior Threat Modeling Specialist

JOB OPPORTUNITY:

As an individual contributor with comprehensive knowledge in the specific area; you will be responsible for leading R&D efforts for security risk assessments and threat modeling.  Have the ability to execute highly complex or specialized projects.  Will be responsible for developing, communicating, implementing, enforcing, and monitoring security controls to protect the organization’s technology assets from intentional or inadvertent modification, disclosure, or destruction. Adapts precedent and may make significant departures from traditional approaches to developing solutions. 

RESPONSIBILITIES:

• Provide information security expertise and assist in incorporating control measures into new and existing projects around medical device security
• Assist with performing risk assessments of existing and new company medical devices
• Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
• Ensures that the user community understands and adheres to necessary procedures to maintain security.
• May require familiarity with domain structures, user authentication, and digital signatures.
• Conducts accurate evaluation of the level of security required. 
• Has in-depth knowledge of intrusion detection and Internet architecture.
• Must be able to weigh business needs against security concerns and articulate issues to management.
• May coach or provide guidance to lower-level security professionals.

REQUIRED QUALIFICATIONS:

• Bachelor’s Degree with a minimum of 5 – 10 years of experience.
• Understanding of product security and the relationship between threat, vulnerability, and potential customer risk in the context of risk management.
• Familiarity with FDA cybersecurity guidelines for company products.
• Knowledge of national and international regulatory compliances and frameworks such as NIST Cybersecurity Framework, ISO 27001, EU DPD, and HIPAA/HITECH.
• Certifications such as CISA, CISM, CRISC, CISSP, CPP, or CFE are preferred.
• Deep knowledge/expertise of the latest security technologies and tools used within the product/cybersecurity domain, such as PKI, firewalls, IDS/IPS, 2-factor authentication, etc. is required.
• Ability to translate complex IT Security problems and issues into simple business terms/business impact.
• Previous work experience in a product security or cybersecurity role is preferred.