Product Security Representative

Job description
Summary/Purpose:

We are looking for a Product Security Representative to be part of our exciting journey to develop and build a scaling platform for medical applications used by radiologists, cardiologists and surgeons to improve the review and analysis of medical images. You need to drive security activities, check and follow vulnerabilities, ensure security control at new feature design, increase security awareness and help to identify and reduce possible product security gaps.

Essential Responsibilities:
• 5+ years full-time information security experience with emphasis on technical assessment (system/web application vulnerability assessment, penetration testing, white-box code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)
• Ensuring and driving product related security activities
• Increase product security awareness within the development team
• Analyzing, tracking and following product related threat, vulnerabilities, security gaps and desired solution
• Maintain cyber security processes, monitoring systems/tools
• Support the development teams by security analyses and threat modelling.
• Product security knowledge and mindset (STIG, vulnerabilities, CVE tracking, security gap analysis)
• Sound understanding of security technologies/techniques like Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA), Hardware/embedded authentication, OAuth, 2-factor authentication, white-box code analysis
• Interact with worldwide engineering and product teams (US, Hungary, India) Qualifications/Requirements:
• Experience analyzing/detecting and remediating cybersecurity issues
• Experience in security/network/system administration/development or equivalent knowledge
• In-depth knowledge of various operating systems (Linux, Windows)
• Practical hands-on experience in a complex system development
• Product security knowledge and mindset (STIG, vulnerabilities, CVE tracking, security gap analysis)
• Has the ability to analyze and evaluate impact of changes, defects and different technology choices
• Good English skills Desired Characteristics:
• Demonstrates clarity of thinking to work through limited information and vague problem definitions
• Influences through others; builds direct and "behind the scenes" support for changes
• Proactively identifies, facilitates and drives project obstacles or barriers on behalf of the team