Senior Product Security Engineer

Brooklyn Park, MN, United States

Olympus Corporation of the Americas Making people’s lives healthier, safer, and more fulfilling is our ultimate purpose. Being True to Life means creating new solutions, making a positive impact on society, and enhancing the way people live. View company page

Are you looking for a company that cares about people’s lives and health, including yours? Let’s inspire healthier lives, together.

Olympus, a leading medical technology company, has focused on making people’s lives better for over 100 years.

Our Purpose is to make people’s lives healthier, safer, and more fulfilling.

Our Core Values are reflected in all we do: Integrity – Empathy – Agility – Unity – Long-Term View

We deliver on our purpose and our core values by staying True to Life.

Job Description The Digital Unit is developing software-based products that will require security engineering. The Senior Product Security Engineer within the Digital Unit will identify security related requirements, assist with threat models, help architect secure solutions, analyze software designs and implementations from a security perspective, and develop and maintain compliant documentation associated with product security. This role requires technical expertise, knowledge of safety critical systems, and the ability to work in a team environment to ensure security and resilience of our current and developing digital products.

Job Duties Plan, test, and implement advanced software security techniques in compliance with technical reference architecture.

Organize on-going security testing and code review to improve software security.

Detect, troubleshoot, and debug issues that arise.

Prepare engineering designs and implement software solutions to help mitigate security vulnerabilities.

Participate in the agile team's work at all levels of the architecture, development, testing.

Develop and contribute to the maintenance of product threat models and security risk management activities through the pre-market phase.

Serve as subject matter expert to the development teams, be security minded and raise the level of understanding and compliance.

Collaborate with the team on the security testing strategy for newly developed and current Digital Unit products, which will include concepts such as, static code analysis, dynamic analysis, fuzz testing, compliance testing, penetration testing, etc.

Provide help and consulting to team members on secure coding practices.

Understand and apply all Olympus Quality System guidance related to product security.

Ensure compliance with regulatory requirements, industry standards, and internal policies governing product security.

Stay informed about new tools, regulations, standards, and best practices of the industry.

Job Qualifications Required:

Bachelor's degree in computer science, information technology, cybersecurity, or related area required, or minimum of 5 years’ experience in a relevant industry.

Minimum of 2 years’ experience working as a Software Security Engineer position or minimum of 5 years’ experience as a Software Engineer required.

Other Considerations (travel/hours availability, etc.):Occasional travel may be required.

Work time outside of “normal” work hours may be required from time to time.

Preferred:

Experience with embedded technology and software security.

Experience in using Secure Software Development Lifecycle (SSDLC) within agile framework.

Expertise in threat modelling, security risk management, secure coding, secure system development, and DevSecOps

Knowledge of application security and code analysis tools such as Veracode, SonarQube, BlackDuck, Cyberspect, Nessus or similar.

Experience with security techniques, standards, and methods for authentication and authorization, applied cryptography, security vulnerabilities and remediation in Windows .NET and Azure environments.

Knowledge of government and industry standards, guidance’s and frameworks applicable to product software development such as NIST Cybersecurity Framework, OWASP, HIPAA, GDPR, SANS/CWE and/or CERT.

Solid technical background and understanding of all aspects of security research and development.

Excellent analytical and troubleshooting skills.

Ability to work both independently and in a team environment.

Excellent communication skills, oral and written.

Able to work in a multi-discipline collaborative environment to include international colleagues and Olympus partners.

Here, people matter—our health, our happiness, and our lives.

Competitive salaries, annual bonus and 401(k)* with company match

Comprehensive Medical, Dental, Visions coverage effective on start date

24/7 Employee Assistance Program

Free virtual live and on-demand wellness classes

Work-life balance supportive culture with hybrid and remote roles

12 Paid Holidays

Educational Assistance

Parental Leave and Adoption Assistance

Volunteering and charitable donation match programs

Diversity & Inclusion Programs including Colleague Affinity Networks

On-Site Child Daycare, Café, Fitness Center**

The anticipated base pay range for this full-time position working at this location is$91,506.00-$123,532.00/ year, plus potential for annual bonus (subject to plan eligibility and other requirements).Olympus considers a variety of factors when determining actual compensation for this positionincluding: level of experience, working location, and relevanteducation and certifications.

About us:

Our Medical business uses innovative capabilities in medical technology, therapeutic intervention, and precision manufacturing to help healthcare professionals deliver diagnostic, therapeutic, and minimally invasive procedures to improve clinical outcomes, reduce costs, and enhance the quality of life for patients and their safety.

Headquartered in Tokyo, Japan, Olympus employs more than 31,000 employees worldwide in nearly 40 countries and regions. Olympus Corporation of the Americas, a wholly owned subsidiary of Olympus Corporation, is headquartered in Center Valley, Pennsylvania, USA, and employs more than 5,200 employees throughout locations in North and South America. For more information, visitwww.olympusamerica.com .

Olympus is dedicated to building a diverse, inclusive and authentic workplace

We recognize diversity in people, views and lifestyle choices and emphasize the importance of inclusion and mutual respect. We strive to continue to foster empathy and unity in the workplace so that our employees can fully contribute and thrive.

Let’s realize your potential, together.

It is the policy of Olympus to extend equal employment and advancement opportunity to all applicants and employees without regard to race, color, national origin (including language use restrictions), citizenship status, religious creed (including dress and grooming practices), age, sex (including pregnancy, childbirth, breastfeeding, medical conditions related to pregnancy, childbirth and/or breastfeeding), gender, gender identity and expression, sexual orientation, marital status, disability (physical or mental) and/or a medical condition, genetic information, ancestry, veteran status or service in the uniformed services, and any other characteristic protected by applicable federal, state or local law.

Applicants with Disabilities: As a Federal Contractor, Olympus is committed to ensuring our hiring process is accessible to everyone. If you need an accommodation in order to complete the application or hiring process, please contact Olympus via email at [email protected]. If your disability impairs your ability to email, you may call our HR Compliance Manager at 1-888-Olympus (1-888-659-6787).

Posting Notes: || United States (US) || Minnesota (US-MN) || Brooklyn Park ||Research and Development

Explore more InfoSec / Cybersecurity career opportunities Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr