Job Description Summary

The Engineer, Product Security Process Excellence will be responsible for continuous improvement and process excellence in product cybersecurity requirements and application of state-of-the-art cybersecurity tools for BD’s extensive portfolio of medical devices.

Job Description

We are the makers of possible 

 

BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. 

 

We believe that the human element, across our global teams, is what allows us to continually evolve. Join us and discover an environment in which you’ll be supported to learn, grow and become your best self. Become a maker of possible with us. 

The position will require experience in the effective use and automation of security scanning, SBOM, threat modeling, and other processes and tools for product development teams. The candidate will be a significant contributor to cybersecurity tooling strategy and maturity metrics, tracking the effectiveness of tooling and training and the resulting reductions in cybersecurity risk. This person will report to the Director, Product Security Process Excellence.

The candidate will oversee and direct the adoption of penetration testing process improvements across all business units and various other aspects of the overarching product security program related to detailed requirements definition and penetration testing (e.g., threat modeling, risk assessment, awareness/training, incident response, strategic initiatives, and external engagements). This person will identify trends that need to be fixed to comply with cybersecurity standards and establish a community of practice for penetration test excellence.

The Engineer, Product Security Process Excellence will utilize available corporate and BU resources with expertise in security engineering, architecture, penetration testing, incident response, and program management.

Responsibilities:

• Partners with development team leads to refine design details from high-level cybersecurity requirements.
• Implements and automates common cybersecurity tools and processes across business units, including documentation, training programs, and effectiveness metrics reporting.
• Collaborates with business unit DevOps teams to deploy common security tools and automation initiatives.
• Establishes penetration test process excellence and assessment criteria to measure the effectiveness of security by design and security testing on product development projects.
• Serves as the primary point of contact for internal and external penetration test resources, coordinating expectations and activities while working closely with business unit Product Security Officers.
• Ensures that Penetration Test activities meet product team objectives and deadlines.
• Performs other duties as required.

Required Qualifications:

• A bachelor’s degree or higher in software or systems engineering, or a related technical discipline.
• At least 3 years of experience as a software development team member contributing to large-scale product development projects.
• At least 3 years of experience with software automation tools, CI/CD pipeline, and Secure DevOps.
• At least 3 years of experience developing requirement design details and implementing cybersecurity controls for new and legacy products.
• Related cybersecurity tool and automation experience: static code analysis, software composition analysis, security scanning tools, security checkers in the CI/CD pipeline, system hardening, DISA STIGs.
• Excellent communication skills and the ability to operate in a multinational business with a comprehensive product portfolio.
• Ability to manage multiple small to medium-sized projects, up to four at any one time.
• Preferred candidate will have direct experience working in a highly federally regulated environment, such as healthcare, hospitals, pharmaceutical companies, etc., with a strict software development security process and standards.

For certain roles at BD, employment is contingent upon the Company’s receipt of sufficient proof that you are fully vaccinated against COVID-19. In some locations, testing for COVID-19 may be available and/or required. Consistent with BD’s Workplace Accommodations Policy, requests for accommodation will be considered pursuant to applicable law.

Why Join Us?

A career at BD means being part of a team that values your opinions and contributions and that