Middle Information Security Engineer IRC213620

Description:

Inviting Information Security Engineer to join a growing account in the medical devices industry domain. Our client is the global leader company of healthcare solutions, which contributes to human welfare by application of biomedical engineering in the research, design, manufacture, and sale of instruments or appliances that alleviate pain, restore health and extend life for people around the world.

Our team is focusing on designing and developing software for medical devices, where the software has strong restrictions for safety and quality, power management, and memory usage.

Requirements:

- At least 1 year of professional experience with IT Security products and services.

- Technical or Cyber Security education.

- Strong knowledge of information security principles, techniques and technologies.

- Experience with threat modeling, vulnerability scoring, risk assessment approaches and methodologies used during software or system development.

- Extensive knowledge of application security: development stages, security controls and approaches.

- Familiarity with security frameworks, standards, and best practices: OWASP, MITRE ATTACK, CIS, NIST CSF, etc.

- Upper intermediate English communication skills (both speaking and writing).

- Strong attention to detail, analytical mind and outstanding problem-solving skills.

- Nice to have: security certifications Security +, CEH, OSCP, etc.

Job Responsibilities:

- Create the security documentations (security requirements, threat model, security report, vulnerability assessment report, pentest report, etc.) for a new software / hardware product.

- Perform security related tasks according to SDLC procedures such as, but not limited to, security requirements elicitation, threat modeling, risk assessment, vulnerability scoring, security controls validation, etc.

- Monitor the 3rd party software for security vulnerabilities, analyze and assess the vulnerabilities impact on a new or released software / hardware product.

- Identify security critical processes and components within build and manufacturing a new software/hardware product.

- Prepare, submit, and maintain the security reports in the documents management system.

- Develop or identify security controls and mitigations through analysis 3rd party technical documentations to prevent vulnerabilities.

- Continuously check for the new threats and vulnerabilities related to the released product or system, actively communicate security weaknesses to the development team and determine the required remediation steps.

- Present the security documentations to the security committee and the product managers.

What We Offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people's lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic is a leader in digital engineering. We help brands across the globe design and build innovative products, platforms, and digital experiences for the modern world.

By integrating experience design, complex engineering, and data expertise-we help our clients imagine what's possible, and accelerate their transition into tomorrow's digital businesses.

Headquartered in Silicon Valley, GlobalLogic operates design studios and engineering centers around the world, extending our deep expertise to customers in the automotive, communications, financial services, healthcare and life sciences, manufacturing, media and entertainment, semiconductor, and technology industries.

GlobalLogic is a Hitachi Group Company operating under Hitachi, Ltd. (TSE: 6501) which contributes to a sustainable society with a higher quality of life by driving innovation through data and technology as the Social Innovation Business.