Principal Product Security Engineer

Posted Yesterday
2 Locations
Remote or Hybrid
126K-198K Annually
Senior level
Healthtech • Biotech
The Role
Lead product cybersecurity across medical devices, connected technologies, digital solutions, and software. Define security requirements, maintain threat models and risk registers, lead vulnerability and penetration testing, integrate automated security tools, mature secure development practices, support incident response, and provide technical leadership to regulators, customers, auditors, and security researchers. Collaborate across IT, R&D, compliance, and other business teams.
Summary Generated by Built In

Life Unlimited. At Smith+Nephew we design and manufacture technology that takes the limits off living.   


Join our Global Product Security team in Pittsburgh and help protect medical technologies, connected devices, digital solutions, and the data they rely on. You will provide cybersecurity leadership across the full product lifecycle while partnering with Global IT, Research and Development, and Compliance teams.


**This position does not offer visa sponsorship now or in the future**


What will you be doing?

  • Lead the definition and implementation of cybersecurity requirements and controls across technologies, capital devices, digital accessories, connected infrastructure, and software applications
  • Create and maintain product cybersecurity risk registers and threat models, identifying and addressing security risks throughout the development lifecycle
  • Lead security testing and assessment activities, including vulnerability testing, penetration testing, code analysis, software composition analysis, and endpoint protection
  • Recommend technical solutions and support the integration of automated tools and processes that reduce security vulnerabilities
  • Help develop and mature the Global Product Security Strategy and Secure Software Development Life Cycle
  • Support product cybersecurity incident response activities in line with relevant industry practices and standards
  • Provide technical leadership when engaging with regulators, customers, auditors, industry groups, and security researchers

 

What will you need to be successful?

  • A bachelor’s degree in life science, computer science, information systems, or equivalent formal training or professional experience
  • At least five years of hands on experience in product security, device security, application security, or information technology security
  • Experience with vulnerability management, penetration testing, code security, security governance, risk assessments, network infrastructure, and cloud security
  • Knowledge of medical device regulations and cybersecurity frameworks, including HIPAA, FDA requirements, ISO 27001 and 27002, NIST CSF, and OWASP
  • The ability to design and guide the implementation of innovative security solutions while working independently across multiple teams and business areas
  • Excellent written and verbal communication, prioritization, customer service, and problem resolution skills
  • A current CISM, CISSP, CRISC, or equivalent certification is preferred You. Unlimited.

We believe in creating the greatest good for society. Our strongest investments are in our people and the patients we serve.


We anticipate the application window for this opening to close on 10.10.2026


The anticipated base compensation range for this position is $125,500.00 - $198,000.00 USD annually and the compensation offered will depend on the candidate’s qualifications, job-related knowledge/skills, geographical location. You will be entitled to receive bonus and benefits, which include medical, dental, and vision coverage, 401k, tuition reimbursement, medical leave programs, and a variety of wellness offerings.​

Smith & Nephew follows the Pay Transparency and non-discrimination provisions described by local and state policies.


You Unlimited.

We believe in creating the greatest good for society. Our strongest investments are in our people and the patients we serve.    

  • Inclusion and Belonging- Committed to Welcoming, Celebrating and Thriving on Inclusion and Belonging, Learn more about Employee Inclusion Groups on our website (https://www.smith-nephew.com/).
  • Your Future: 401k Matching Program, 401k Plus Program, Discounted Stock Options, Tuition Reimbursement  
  • Work/Life Balance: Flexible Personal/Vacation Time Off, Paid Holidays, Flex Holidays, Paid Community Service Day  
  • Your Wellbeing: Medical, Dental, Vision, Health Savings Account (Employer Contribution of $500+ annually), Employee Assistance Program, Parental Leave, Fertility and Adoption Assistance Program 
  • Training: Hands-On, Team-Customized, Mentorship  
  • Extra Perks: Discounts on fitness clubs, travel and more!  

#LI-HYBRID

#LI-SB2

#LI-DNI

Smith+Nephew provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability.

Stay connected by joining our Talent Community.

We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.  

Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N.

Explore our website and learn more about our mission, our team, and the opportunities we offer. 

 

Skills Required

  • Bachelor’s degree in life science, computer science, information systems, or equivalent formal training or professional experience
  • At least five years of hands-on experience in product security, device security, application security, or information technology security
  • Experience with vulnerability management, penetration testing, code security, security governance, risk assessments, network infrastructure, and cloud security
  • Knowledge of medical device regulations and cybersecurity frameworks, including HIPAA, FDA requirements, ISO 27001, ISO 27002, NIST CSF, and OWASP
  • Ability to design and guide implementation of security solutions independently across multiple teams and business areas
  • Excellent written and verbal communication, prioritization, customer service, and problem-resolution skills
  • Current CISM, CISSP, CRISC, or equivalent certification

Smith & Nephew Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Smith & Nephew and has not been reviewed or approved by Smith & Nephew.

  • Healthcare Strength — Medical, dental, and vision plans are paired with a global mental‑health program for employees and families, indicating a robust core health package.
  • Retirement Support — U.S. employees have access to a 401(k) with company contributions, and share plans complement long‑term savings.
  • Leave & Time Off Breadth — Generous holiday, paid volunteering leave, and flexible work models point to broad time‑off options.

Smith & Nephew Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Watford
15,318 Employees

What We Do

Smith+Nephew is a global medical technology company. We design and manufacture technology that takes the limits off living. We support healthcare professionals to return their patients to health and mobility, helping them to perform at their fullest potential. From our first employee and founder, T.J. Smith, to our team today, it’s our people who make Smith+Nephew a unique place. Yes, we love to innovate and develop exciting technologies, and we offer competitive salaries and progressive benefits. But it’s our culture - of Care, Collaboration and Courage - that really sets us apart. Through a spirit of ownership and can-do attitude, we work together to win.. We’re a company of people who care about each other, about our customers and their patients, and about our communities. Together, we fulfill our shared purpose of Life Unlimited. Please note: not all products referred to may be approved for use or available in all markets.

Similar Jobs

SentiLink Logo SentiLink

Principal Software Engineer

Fintech • Information Technology • Software
Remote
United States
170 Employees
220K-280K Annually

MetLife Logo MetLife

Principal Data & Analytics Lead

Fintech • Information Technology • Insurance • Financial Services • Big Data Analytics
Remote or Hybrid
United States
43000 Employees
140K-210K Annually

MetLife Logo MetLife

Consultant

Fintech • Information Technology • Insurance • Financial Services • Big Data Analytics
Remote or Hybrid
United States
43000 Employees
71K-105K Annually

MetLife Logo MetLife

Nurse Reviewer

Fintech • Information Technology • Insurance • Financial Services • Big Data Analytics
Remote or Hybrid
United States
43000 Employees
54K-72K Hourly

Similar Companies Hiring

Granted Thumbnail
Artificial Intelligence • Healthtech • Insurance • Mobile • Financial Services
New York, New York
23 Employees
OneImaging Thumbnail
Healthtech
Miami, FL
62 Employees
Vitalize Thumbnail
Artificial Intelligence • Healthtech • Software
US
50 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account