{"id":3868734,"url":"https://alion.io/job/novanta-sr-product-security-engineer","title":"Sr. Product Security Engineer","company":{"id":58917,"name":"Novanta","domain":"novanta.com","url":"https://alion.io/company/novanta","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":12,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brno, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"KEV","optional":false},{"name":"SBOM","optional":false},{"name":"EU MDR","optional":true},{"name":"IEC 62304","optional":true},{"name":"ISO 14971","optional":true}],"status":"live","first_seen_at":"2026-11-06T13:23:01Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T09:12:08Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Build a career powered by innovations that matter! At Novanta, our innovations power technology products that are transforming healthcare and advanced manufacturing-improving productivity, enhancing people’s lives and redefining what’s possible. We create for our global customers engineered components and sub-systems that deliver extreme precision and performance for a range of mission-critical applications-from minimally invasive surgery to robotics to 3D metal printing.\nNovanta is one global team with over 26 offices located in The Americas, Europe and Asia-Pacific. Looking for a great place to work? You have found it with a culture that embraces teamwork, collaboration and empowerment. Come explore Novanta.\nBusiness Unit Overview\nThis position is opened for Novanta’s group specialized in the field of Minimally Invasive Medicine where we develop devices and accessories so that doctors can operate with small cuts. We also develop displays, video recorders and routing systems that make diagnosis and treatment easier for everyone. Together with customers, doctors, and technical experts, our teams continuously search for new ways to innovate.\nSummary\nThe Senior Product Security Engineer is responsible for Vulnerability management & Security Operations for the end-to-end vulnerability management lifecycle across Novanta's medical device portfolio. The role owns vulnerability monitoring, analysis, triage, risk evaluation, reporting, customer communication, process governance, and continuous improvement of vulnerability management capabilities. The position serves as the focal point for product vulnerability operations and post-market cybersecurity activities, helping ensure that vulnerabilities are evaluated, communicated, tracked, and documented in accordance with applicable regulatory requirements, standards, internal procedures, and customer commitments.\nPrimary Responsibilities\nVulnerability Monitoring and Analysis\nMonitor CVE, NVD, CISA KEV, vendor advisories, SBOM and SCA outputs.\nIdentify vulnerabilities affecting products and third-party components.\nAssess applicability, exploitability, product impact, and risk.\nPerform triage, prioritization, and CVSS evaluation.\nDocument conclusions, evidence, mitigation options, and actions.\nSecurity risks evaluation and assessment\nPerforms threat modelling of identified system functions\nPrepares and supports decision on risk treatment / Perform Risk assessment\nReporting and Customer Communication\nOwn the vulnerability reporting process from identification to closure.\nCommunicate vulnerability impact and remediation plans to customers.\nSupport coordinated disclosure and regulatory reporting when required.\nProcess Ownership\nMaintain and improve the vulnerability assessment and reporting framework.\nDefine workflows, evaluation criteria, templates, records, and approval steps.\nAutomation and Tooling\nAutomate vulnerability intake, analysis, reporting, and metrics.\nIntegrate SBOM and vulnerability intelligence.\nImprove tool accuracy, data quality, coverage, and reliability.\nYour Experience, Education, and Skills\nFive or more years of experience in product security, vulnerability management, cybersecurity operations, or security engineering.\nHands-on experience with vulnerability analysis, risk evaluation, remediation tracking, and reporting.\nExperience with vulnerability management and reporting tools.\nOverview of operating systems, networking, embedded systems, and third-party components.\nExcellent English communication and ability to explain technical findings to customers and non-technical stakeholders.\nStrong ownership, analytical thinking, and attention to detail.\nDegree in Cybersecurity, Computer Science, Software Engineering, Electrical Engineering, or a comparable field; equivalent experience may be considered.\nEligible to work legally in Czech republic (permanent residence/free access to the job market)\nWe prefer (nice-to-have)\nMedical device or regulated-industry experience is preferred.\nKnowledge of IEC 81001-5-1, IEC 62304, ISO 14971, EU MDR, FDA medical device cybersecurity expectations, and the EU Cyber Resilience Act is preferred.\nRelevant cybersecurity certifications are an advantage.\nBenefits\nExtra week of vacation (25 days/year)\n5 sick days per calendar year\n1 day of paid time off for charitable activities/year\nFlexi Pass vouchers with a nominal value of 1000 CZK/month\nContribution to supplementary pension insurance 1000 CZK/month (after the probationary period)\nFlexible working hours (core 10 - 15:00)\nEvery year, wages are reassessed from 1 April\nMeal vouchers in the form of a flat rate - monetary value (129,50 CZK/day)\nMonetary allowance for working from home (max. 2 days/week)\nMultiSport for only 300 CZK/month\nBonuses for recommending a new employee up to CZK 110,000\nFree refreshments at the workplace (juice, hot drinks - great coffee, tea; healthy snacks and fruit/vegetables 2 times a week)\nTraining, language courses, career advancement\nDog-friendly office, Family-friendly environment\nCorporate events - Summer Party, Christmas Party, Family Day, SportDay, Board Game Afternoon, Meet & Greet and more\nFree parking for employees and shower at the workplace for athletes\nNovanta is proud to be an equal employment opportunity and affirmative action workplace. We consider all qualified applicants without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, military and veteran status, disability, genetics, or any other category protected by federal law or Novanta policy.\nPlease call +1 781-266-5700 if you need a disability accommodation for any part of the employment process.","description_format":"text","description_chars":5705,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"region"},{"name":"China","iso":"CN","kind":"region"},{"name":"India","iso":"IN","kind":"region"},{"name":"Germany","iso":"DE","kind":"region"},{"name":"Japan","iso":"JP","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"United Kingdom","iso":"GB","kind":"region"},{"name":"Argentina","iso":"AR","kind":"region"},{"name":"Australia","iso":"AU","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Brazil","iso":"BR","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Canada","iso":"CA","kind":"region"},{"name":"Colombia","iso":"CO","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Indonesia","iso":"ID","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Malaysia","iso":"MY","kind":"region"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"New Zealand","iso":"NZ","kind":"region"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Pakistan","iso":"PK","kind":"region"},{"name":"Philippines","iso":"PH","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"South Korea","iso":"KR","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Taiwan","iso":"TW","kind":"region"},{"name":"Thailand","iso":"TH","kind":"region"},{"name":"Vietnam","iso":"VN","kind":"region"},{"name":"American Samoa","iso":"AS","kind":"region"},{"name":"Anguilla","iso":"AI","kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Bangladesh","iso":"BD","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"Bhutan","iso":"BT","kind":"region"},{"name":"Bolivia","iso":"BO","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Brunei Darussalam","iso":"BN","kind":"region"},{"name":"Cambodia","iso":"KH","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Chile","iso":"CL","kind":"region"},{"name":"Cook Islands","iso":"CK","kind":"region"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"East Timor","iso":"TL","kind":"region"},{"name":"Ecuador","iso":"EC","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Falkland Islands","iso":"FK","kind":"region"},{"name":"Fiji","iso":"FJ","kind":"region"},{"name":"French Guiana","iso":"GF","kind":"region"},{"name":"French Polynesia","iso":"PF","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Greenland","iso":"GL","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guam","iso":"GU","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Guyana","iso":"GY","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Kiribati","iso":"KI","kind":"region"},{"name":"Laos","iso":"LA","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Maldives","iso":"MV","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Marshall Islands","iso":"MH","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Micronesia","iso":"FM","kind":"region"},{"name":"Mongolia","iso":"MN","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nauru","iso":"NR","kind":"region"},{"name":"Nepal","iso":"NP","kind":"region"},{"name":"New Caledonia","iso":"NC","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Niue","iso":"NU","kind":"region"},{"name":"Norfolk Island","iso":"NF","kind":"region"},{"name":"Northern Mariana Islands","iso":"MP","kind":"region"},{"name":"Palau","iso":"PW","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Papua New Guinea","iso":"PG","kind":"region"},{"name":"Paraguay","iso":"PY","kind":"region"},{"name":"Peru","iso":"PE","kind":"region"},{"name":"Pitcairn Islands","iso":"PN","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":"VC","kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Samoa","iso":"WS","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"},{"name":"Solomon Islands","iso":"SB","kind":"region"},{"name":"Sri Lanka","iso":"LK","kind":"region"},{"name":"Suriname","iso":"SR","kind":"region"},{"name":"Tokelau","iso":"TK","kind":"region"},{"name":"Tonga","iso":"TO","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"Tuvalu","iso":"TV","kind":"region"},{"name":"Uruguay","iso":"UY","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"},{"name":"Vanuatu","iso":"VU","kind":"region"},{"name":"Venezuela","iso":"VE","kind":"region"},{"name":"Wallis and Futuna","iso":"WF","kind":"region"},{"name":"Hong Kong","iso":"HK","kind":"region"},{"name":"Singapore","iso":"SG","kind":"region"},{"name":"Macau","iso":"MO","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Lasers & Laser Systems","Information Security","Motors, Drives & Motion Control","Machine Vision & 3D Cameras"],"lifecycle":[{"event":"open","at":"2026-11-06T13:23:01Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":45,"reasons":["conf:8","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/novanta-sr-product-security-engineer","json_url":"https://alion.io/job/novanta-sr-product-security-engineer.json","meta":{"generated_at":"2026-11-08T15:20:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32456,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58917},"rest":"https://alion.io/mcp/rest/get_company?id=58917"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnovanta-sr-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnovanta-sr-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnovanta-sr-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/novanta-sr-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnovanta-sr-product-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3868734}},{"tool":"search_jobs","arguments":{"company":"novanta.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3868734},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}