About the Job

The Security Engineer aids in the growth and continuous improvement of FMI’s security program. The incumbent implements and maintains a variety of security tools and software and performs technical security analysis of IT solutions. This person is responsible for supporting the design, implementation, and maintenance secure software applications and systems. They work to identify, assess, and mitigate security vulnerabilities throughout the software development lifecycle. 

Key Responsibilities

• Partner with appropriate Technology teams to ensure new IT systems are designed, configured, and implemented in a secure manner.
• Document security configurations, procedures, changes, use and test cases.
• Assist Technology teams with IT asset security by supporting threat modeling exercises, documenting security risks, as well as updating and enforcing secure baseline configurations for various system types, including—but not limited to—custom software applications, laptops, servers, and cloud-based instances.
• Document approved baseline configurations.
• Work with Technology teams to ensure implementation of procedures for vulnerability management of FMI technology systems.
• Assist Technology teams with technology projects to ensure secure configuration, implementation, and monitoring of systems within FMI’s software and systems environment.
• Implement, maintain, and support in-house security tools to support zero-trust and defense in depth security architectures.
• Evaluate new and existing custom software systems for vulnerabilities and provide suggestions for countermeasures to protect against potential threats. 
• Testing and verifying software security including penetration testing, static and dynamic analysis, and fuzzing, to identify and recommend solutions to security flaws.
• Work closely with software developers, architects, and other stakeholders to ensure security is integrated into all aspects of the software development lifecycle.
• Educating developers and other stakeholders about security best practices and potential risks.
• Assist in tracking risks and driving remediation of risks. 
• Other duties as assigned.

Qualifications:

Basic Qualifications:

• Bachelor’s degree in computer science, computer engineering, information security, or other closely related discipline
• 5+ years of experience in software development and technology, a portion of which included support for security-related technology projects

Preferred Qualifications:

• Advanced Degree in information security, information systems, or related field
• Hands-on experience implementing technical security elements, including:
  • Development experience with source control tools (GitHub, Gitlab, SVN, Perforce, etc.) and CI/CD frameworks (Jenkins, Azure Devops, GitHub Actions, Gitlab Runners, etc.)
  • Experience designing cybersecurity coding curriculum for software developers, with frameworks such as Secure Code Warrior
  • Ethical hacking skills using tools such as Burp Suite, Postman, and Nmap to perform standardized and routine application testing
  • Familiarity with code analysis and tools such as Snyk, Fortify, SonarQube, JFrog Xray, as well as ability to recognize security hotspots and secure software best practices
• Security certifications, such as CISSP, CISA, GSEC, and equivalent
• Knowledge of current and emerging security and information technology standards and practices, including AI and LLM
• Knowledge of cloud-based Single Sign-On (SSO) technologies and related standards such as OAUTH 2.0 and SAML
• Familiarity with security compliance directives, including: OWASP, NIST, IEC62304, ISO 27001, SSAE SOC 2, CIS, etc.
• Exposure to cybersecurity principles applicable to medical device software, such as SAMD or SIMD
• Demonstrated ability to meet deliverables, timetables, and deadlines
• Agreement to maintain confidentiality as it pertains to sensitive company, employee, and proprietary data and information
• Personal integrity and behavior consistent with FMI’s ethical standards to inspire confidence in customers, peers, partners, and employees
• Demonstrated ability to work effectively with internal and external stakeholders
• Understanding of HIPAA, GDPR, and other international regulations regarding patient data, privacy, and safety.
• Commitment to reflect FMI’s values: Passion, Patients, Innovation, and Collaboration.

The expected salary range for this position based on the primary location of Remote is $ $121,000 - $163,000 per year. The salary range is commensurate with FMI’s compensation practice and considers factors including, but not limited to, education, training, experience, external market conditions, criticality of role, and internal equity. A discretionary annual bonus may be available based on individual and Company performance.  This position also qualifies for FMI benefits.

#LI-Remote