Senior Product Security Engineer

Overview

Senior Product Security Engineer to support SBOM generation, vulnerability monitoring, and triage for medical devices within the Affera software team.

What you'll do

• Triaging vulnerabilities across SBOMs in the tool, regardless of severity.
• Generate SBOMs per FDA requirements, including end-of-support and software level-of-support info.
• Continuously monitor, review, and triage newly identified vulnerabilities from SBOM monitoring activities.
• Automate SBOM generation and ownership of related processes.
• Analyze vulnerabilities and provide patching recommendations and remediation actions.
• Partner with cross-functional teams to assess risk and prioritize remediation efforts.
• Maintain documentation of findings, actions taken, and outcomes.

What you'll need

• Bachelor’s degree in computer science, software engineering, or equivalent.
• 8 to 14 years of relevant experience.
• Prior experience in product security.
• Proficiency in Python or another scripting language.
• Experience in vulnerability management.
• Vulnerability assessment and triage experience in a regulated industry.
• Familiarity with SBOM management tools such as Dependency-Track.

Details

• Location: Nanakramguda, Hyderabad, India.