Lead Product Security Architect

Exciting Opportunity at Hologic: Become a Lead Product Security Architect!

Are you a cybersecurity enthusiast ready to make a significant impact in the healthcare industry? Join our dynamic team at Hologic's Breast & Skeletal Health Division, where you will champion a Secure by Design culture for our groundbreaking, life-saving medical devices. As a Lead Product Security Architect, you will play a crucial role in ensuring the security and integrity of our innovative healthcare solutions. This role may sit in Newark, DE, Santa Clara, CA,  Marlborough, MA or can sit remotely. This is your chance to be part of something truly transformative and contribute to advancements in women's health. 

 

Key Responsibilities:

 

Champion Security Culture: Lead the charge in embedding a Secure by Design culture across product teams. Ensure compliance with security standards and best practices, and represent our division in industry forums, information-sharing organizations, and standards groups.

Policy Enhancement: Spearhead the continuous improvement of our Secure by Design policies and procedures, collaborating with functional teams to align our products with the latest security requirements and regulatory standards.

Security Tools and Automation: Partner with DevOps to enhance our Security Tools capabilities, automation, and related processes, ensuring security excellence across our extensive portfolio of medical devices.

Security Engineer Support and Mentoring: Provide guidance and mentorship to Product Security Engineers, driving security planning, design consistency, and overall excellence.

Documentation and Architecture: Lead the creation and maintenance of security design documentation, architecture views, and diagrams for our products.

Design Strategy: Participate in product design discussions to identify and integrate security requirements, considerations, and deliverables. Identify common security modules and resources that can be shared across all products.

Security Assessments: Lead or support ongoing security assessments, including Threat Modeling, for Hologic products and remote connectivity solutions. Assess new products or projects for required security activities and deliverables.

Security Communication: Lead and support security communications with external stakeholders and customers. Develop security resources, such as White Papers, and support Sales and Marketing efforts by highlighting our security excellence.

Education and Training: Educate teams on securing our products, development environments, connected health solutions, and their operating environments.

Continuous Learning: Stay ahead of the curve by keeping up with the latest security threats, regulatory changes, industry standards, and best practices.

Ideal Candidate Profile:

Security Architecture and Design: Possess a strong understanding of security architecture and design.

Change Champion: Have a proactive and innovative mindset focused on enhancing and optimizing strategies, processes, and tools.

Travel Flexibility: Be available for travel to Hologic offices, training, conferences, and customer sites.

Autonomous Alignment: Work with minimal supervision while aligning with strategic intentions and corporate priorities.

Global Regulatory Environment: Ensure continuous awareness and adherence to regulatory requirements for our products and environments.

 

Qualifications:

Education: Master’s or Bachelor’s degree in Computer Science, Management Information Science, Engineering, or a related technical field.

 

Medical Systems Knowledge: Experience with medical information system administration and extensive knowledge of medical device security standards and regulations such as FDA Premarket Cybersecurity Guidance, IEC 81001-5-1, AAMI TIR57, AAMI SW96).

 

Regulated Industry Experience: Experience in software development and verification within the medical device industry is preferred.

 

Experience: 

6+ years in:

• Security Architecture and Design
• Security policy, procedures, and standards creation
• Cybersecurity Risk Assessment
• Secure application development
• Computer and network security
• Microsoft Windows and Linux operating systems

 

Technical Skills:

• In-depth knowledge of the secure development lifecycle
• Leading securit