Product Security Engineer tools eng...

Role Overview:

The Smith + Nephew Product Cybersecurity Engineer is responsible for delivering product security scanning and threat models to cross-functional stakeholders within product security and product development teams. The primary goal is to ensure Smith + Nephew products and their data are secure and resilient against cybersecurity threats.

This role involves collaborating with diverse internal stakeholders to design, engineer, and ensure the implementation of security tools used throughout the entire product lifecycle. These tools include threat modeling, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).

The engineer will be responsible for executing security scans (SAST, DAST, SCA) and supporting the creation of Software Bill of Materials (SBOMs), leveraging a strong understanding of the products and available tools.

Responsibilities:

• (50%) Initiate and manage security scans for threat modeling, SAST, DAST, SCA, and SBOM tools.
• (20%) Monitor scan completion, troubleshoot failures, and drive issues to resolution.
• (20%) Distribute scan results and reports to relevant teams and stakeholders. Provide support to developers utilizing the tools. Ensure vulnerabilities are properly routed and triaged.
• (10%) Maintain user guides for each tool and ensure users receive adequate training.

Location:

Pune, India (Hybrid)

Education:

Bachelor's degree in life science, computer science, information systems, or equivalent formal training or work experience.

Licenses/Certifications:

Current CISM, CISSP, CRISC, or equivalent certification is preferred.

Experience:

• 3+ years of hands-on cybersecurity experience.
• Proficiency in running security tools and troubleshooting.
• Strong understanding of mitigating security controls.
• Experience in Vulnerability Management and Application Security.
• Experience with Threat modeling and SBOM generation.
• Familiarity with HIPAA, FDA, ISO 27001/2, NIST CSF, and OWASP.

Competences:

• Experience creating threat models and generating SBOMs.
• Excellent written and oral communication skills.
• Excellent customer service and problem-resolution skills.
• Ability to manage and prioritize multiple tasks effectively.
• Ability to work independently and proactively without daily direction.
• Experience working across multiple teams and business lines.