{"id":58771,"url":"https://alion.io/job/bd-product-security-engineer-embedded","title":"Product Security Engineer - Embedded","company":{"id":1821,"name":"BD","domain":"bd.com","url":"https://alion.io/company/bd","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":43,"ghost_share":0,"stale_share":0.558,"repost_share":0.047,"time_to_fill_p50_days":31,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Irvine, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":105500,"max":168800,"currency":"USD","period":"year","gross":null,"usd_annual":168800},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"C++","optional":false},{"name":"FDA 510(k)","optional":false},{"name":"FHIR","optional":false},{"name":"HL7","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP","optional":false},{"name":"PKI","optional":false},{"name":"RTOS","optional":false},{"name":"SBOM","optional":false},{"name":"Snyk","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-14T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-22T10:31:36Z","board_verified":false,"closed_at":null,"days_open":71,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":71},"description":"We are the people who give possibilities purpose\nBD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us-from design and engineering to the manufacturing and marketing of our billions of MedTech products per year-to look at the impossible and find transformative solutions that turn dreams into possibilities.\n\nJob Description\nSummary:\nThe Product Security Engineer (Embedded) is responsible forsupporting the security of BD's physical, IoT, and embedded medical devices- including embedded Linux and Windows-based platforms- or a subset of features within the product, across the engineering and product development lifecycle.This individual contributes to the delivery of secure products consistent with global regulatory requirements by executing product security program activities under the guidance of senior team members.\nThis role works in partnership with R&D and other stakeholders to support compliance with security technical requirements and reduce security risks within the product or feature set.This includes hands-on execution of product security activities such as threat modeling, vulnerability scanning and remediation, and security risk assessments. The successful candidate will apply developing technical expertiseto evaluate security vulnerabilities and contribute to maintainable technical solutions. Collaboration with software engineers and R&D team members in a dynamic and agile development environment is essential. Having demonstratedpositive work ethicand commitment to achieving project goals with strong collaboration and communication skills - both written and verbal - is key for success in this role.\nThe Product Security Office (PSO) ensures product security risks for BD’s software-based products and solutions are managed well over the lifecycle as they make a difference for our patients and customers. In the PSO, we offer flexibility so you can successfully balance your work and personal responsibilities.We care about our associates and ensure we have servant leaders to help you grow your career, provide feedback and recognition, and empower you to show up every day as your authentic self. We are passionate about improving patient outcomes and enabling our R&D teams to create and maintaininnovative solutions in a secure manner. Armed with a growth mindset and a desire to want to do more, learn more, impact more, you are in a great position to join us and help BD advance the world of health in ways you may never have imagined in your career.\nResponsibilities:\nSecurity Requirements & Implementation: Support project teams in defining and implementing security requirements and technologies for a product or set of features in accordance with industry standards for medical devices, including encryption, authentication, audit logging, hardening measures, SBOM creation and composition, patch management, vulnerability monitoring, and antivirus/antimalware as applicable.\n\nCryptography & PKI: Support the selection and implementation of appropriate cryptographicalgorithms, key management practices, and certificate lifecycle management (issuance, renewal, revocation) for devices and cloud-connected components.\n\nSecure Communications: Evaluate and support secure communication implementations across device interfaces and network protocols relevant to the product, including validation of TLS/mTLSconfigurations and medical or proprietary protocols as applicable.\n\nEmbedded & Firmware Security: Support hardening of embedded Linux,Windows, and RTOS-based device platforms, including secure boot,firmware integrity, hardware attack surface reduction, and physical/IoTdevice engineering practices across the product development lifecycle.\n\nCloud & API Security: Assist in identifyingand addressing security risks in cloud-connected device backends and associated APIs, including authentication, authorization, and protection of data in transit and at rest.\n\nDesign Reviews: Participatein technical design reviews and code inspections, providing feedback to project team members and following proper coding practices.\n\nSecurity Assessments: Support execution of product security risk assessments, hazard analysis, and vulnerability remediation activities in coordination with product development software engineers.\n\nProcess & Documentation: Assist product development teams in complying withproduct security framework activities and contributing to security documentation, including Incident and Vulnerability Management Plans and Product Security White Papers.\n\nIncident Response: Participatein product security incident response activities as appropriate.\n\nTraining & Procedures: Where applicable, support the deployment of software engineering procedures and training related to vulnerability scanning and static code analysis tools.\n\nAutomated Testing: Where applicable, assistR&D teams in implementing systems for automated testing of software vulnerabilities and verification of OS security patches.\n\nQuality Assurance: Where applicable, contribute to quality in R&D security test deliverables, including design, data summary, report preparation, and review for adherence to applicable regulations.\n\nMay perform other duties as required.\n\nMinimum Required:\nUndergraduate degree in computer engineering, cybersecurity, computer science,or related technical field.\n\nHands-on experience with embedded Linux, Windows Embedded/IoT, or RTOS-based systems, including familiarity with C/C++ in an embedded security engineering context.\n\nMinimum of 2+ years in product security, product development, software development, or quality assurance.\n\nFoundational knowledge of information security standards for product development.\n\nBased in or in a commutable distance to the Irvine California area\n\nPreferred Knowledge, Skills:\nMaster’s degree (cybersecurity, computer science, software engineering) with minimum of 2 years of industry experience\n\nExposure to embedded/firmware security tooling and techniques, such as firmware image analysis, JTAG/SWD hardware debugging, and staticanalysis for C/C++embedded codebases.\n\nFamiliarity with product cybersecurity requirements in the context of 510(k) and/or PMA-regulated products.\n\nDeveloping experience assessing security risks using industry standard methods (penetration test results, threat modeling, security testing) and applyingcompensating security controls.\n\nFoundational competence in threat modeling software systems or software-enabled products using industry standard methods (STRIDE, PASTA, NIST, OWASP).\n\nUnderstanding ofapplied cryptography fundamentals: algorithm and mode selection, key length, hashing, and secure key storage practices.\n\nFamiliarity with PKI concepts including CA hierarchies, certificate lifecycle management, and revocation mechanisms (CRL/OCSP).\n\nFamiliarity with securing network communications, including TLS/mTLSconfiguration and validation, and medical or device-specific protocols (e.g., HL7, FHIR, Bluetooth LE) as applicable.\n\nFoundational awareness of cloud and API security principles, including authentication/authorization patterns and protection of PHI/PII in cloud-connected product architectures.\n\nExposure to cybersecurity tooling such as Black Duck, Coverity, Veracode, Nessus, Snyk, or Metasploit.\n\nExperience working within a structured software development lifecycle process; agile methodology.\n\nExperience withconnected products, software development, lifecycles, network technologies, or regulated environments.\n\nExperience with configuration and use of static code analysis and vulnerability scanning tools.\n\nFoundational understanding of applied cryptography and PKI concepts (cipher selection, key management, certificate lifecycle).\n\nCertifications such as CCNA, CISSP, CISM, GIAC, CCSP, CEH\n\nWhy Join Us?\nTo find purpose in the possibilities, we need people who can see the bigger picture, who understand the human story that underpins everything we do. We welcome people with the imagination and drive to help us reinvent the future of healthcare. At BD, you’ll discover a culture in which you can learn, grow and thrive.\nWe believe that when people connect in person, we learn faster, collaborate more deeply, and build a stronger culture. Join us and enjoy a culture where face-to-face collaboration supports your learning, your progress, and your success.\nTo learn more about BD visithttps://bd.com/careers.\nBecton, Dickinson, and Company is an Equal Opportunity Employer. We evaluate applicants without regard to race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, and other legally protected characteristics.\nRequired Skills\nOptional Skills\n.\nPrimary Work Location\nUSA CA - Irvine Laguna CanyonAdditional Locations\nWork Shift\n\nAt BD, we reward, support and develop our associates through our comprehensive Total Rewards program. We are committed to attracting and retaining high quality talent by providing reward and recognition opportunities that promote a performance-based culture, as well as a competitive package of compensation and benefits programs. You can learn more on our career site under \" Our Commitment to You.\"\nOur salary or hourly rate ranges reward associates fairly and competitively. We regularly review these ranges and factors, such as location, contribute to the range displayed.\nOur pay is based on the role and the necessary skills and education to perform it successfully. The salary or hourly rate offered is determined by the role's specific requirements, including any applicable step rate pay system at the work location. Salary or hourly pay ranges are influenced by labor laws and Collective Bargaining Agreement (CBA) requirements applicable to the work location which may also affect the workplace arrangement of the role.\nSalary Range Information\n$105,500.00 - $168,800.00 USD Annual","description_format":"text","description_chars":10149,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Surgical Instruments & Devices","Health & Medical Electronics"],"lifecycle":[{"event":"open","at":"2026-08-14T00:00:00Z"},{"event":"close","at":"2026-10-03T07:13:09Z"},{"event":"reopen","at":"2026-10-20T05:15:50Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.342,"p_room":0.28,"age_days":71,"expected_fill_days":31,"reasons":["conf:43","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":168800,"is_top_pay":true},"html_url":"https://alion.io/job/bd-product-security-engineer-embedded","json_url":"https://alion.io/job/bd-product-security-engineer-embedded.json","meta":{"generated_at":"2026-10-24T11:34:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16517,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1821},"rest":"https://alion.io/mcp/rest/get_company?id=1821"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbd-product-security-engineer-embedded"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbd-product-security-engineer-embedded"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbd-product-security-engineer-embedded"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bd-product-security-engineer-embedded\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbd-product-security-engineer-embedded"}]}