Senior Product Cybersecurity Engineer II

$161,925 - $247,000/Yr

Freenome

Full-time - Senior

Remote

251-500 employees

Administrative and Support Services

About the position

The Senior Product Cybersecurity Engineer II at Freenome is responsible for leading the design and implementation of cybersecurity measures for medical device software, hardware, and digital solutions. This role involves collaboration with various teams to ensure that all products meet the highest standards of cybersecurity and privacy, in line with regulatory and customer requirements. The position aims to mature product cybersecurity architecture within the medical device or in-vitro diagnostics sector, significantly impacting the organization's mission to change the landscape of cancer detection.

Responsibilities

• Develop and maintain security architecture for medical device products, ensuring cybersecurity is integrated into the product lifecycle.
• Conduct threat modeling, risk assessments, and vulnerability analysis to identify potential cybersecurity threats for medical devices.
• Develop and implement strategies to mitigate cybersecurity risks.
• Identify and drive implementation of security standards, protocols, encryption, and authentication mechanisms.
• Drive cybersecurity testing activities for medical devices in collaboration with internal and external partners.
• Ensure compliance with relevant national regulations and standards, such as HIPAA and FDA guidelines.
• Work with product management, engineering, IT, InfoSec, and external stakeholders to define cybersecurity requirements.
• Stay updated on the latest cybersecurity trends, threats, and technologies in the medical device sector.
• Provide coaching and mentorship on product cybersecurity topics.

Requirements

• Bachelor of Science in Computer Science, Cybersecurity, Engineering, or related field or equivalent training, fellowship, and/or work experience.
• 6+ years of related work experience within medical device or IVD sector.
• Experience in product cybersecurity, particularly in the design and implementation of cybersecurity solutions for medical devices.
• Deep understanding of healthcare regulations and standards affecting medical device cybersecurity.
• Proficiency in security architectures, encryption technologies, identity and access, and network security.
• Experience with risk management methodologies and security assessment tools.
• Excellent communication and interpersonal skills.

Nice-to-haves

• Familiarity with industry frameworks & regulatory standards: HIPAA, HITECH, HITRUST, NIST Cybersecurity Framework, SOC 2.
• Relevant professional certifications (e.g., CISSP, CISM, CISA, CRISC) are highly desirable.

Benefits

• Base salary range of $161,925 - $247,000.
• Eligibility for pre-IPO equity and cash bonuses.
• Full range of medical, financial, and other benefits.