Product Cybersecurity Engineer

Mirion

21h

About The Position

Mirion is seeking a motivated and enthusiastic Product Cybersecurity Engineer to support Mirion product lines. The engineer will play a crucial role providing cybersecurity advisory services and support to product owners, sales teams, and developers in the form of providing security guidance, reviews, and compliance information. Additionally, this role will build out processes and technical capabilities as assigned to support the Product Cybersecurity mission. This role will primarily support the Mirion Dosimetry line of products but may support additional other products as needed.

Requirements

Bachelor’s degree in information technology, information security, or related field or equivalent practical experience.
Experience: 4+ years in a cybersecurity-focused role, with exposure to cybersecurity governance, risk, and compliance.
Familiarity with cybersecurity frameworks such as ISO 27001, IEC 62443, NIST 800-171, SOC 2, and Cyber Essentials.
Experience with software application architecture and secure software development practices.
Experience with embedded systems and associated security considerations.
Good understanding of cybersecurity concepts and best practices to secure hardware and software components.
Strong communication skills and a collaborative working style.
Desire to work and learn.

Nice To Haves

Familiarity with cyber industry regulations such as FDA Cybersecurity Marking, CE Marking, EU GDPR, and EU Cyber Resilience Act.
Experience with automated SAST and DAST scanning solutions.
Experience with working with DevSecOps pipeline processes.
Experience with Azure and AWS cloud security.

Responsibilities

Provide cybersecurity recommendations and advice to product development teams.
Assist with gathering evidence and providing information for customer security inquiries and for certification frameworks such as ISO 27001 and SOC 2.
Perform risk assessments on Mirion product software, hardware, and architectures.
Document and write product risk assessment and security control reports.
Review and aid with writing cybersecurity related information for product documentation.
Participate in product project meetings as the cybersecurity representative.
Develop or design system architecture for new or revised products.
Collaborate with cross-functional teams to ensure cybersecurity best practices are integrated into product development.
Stay informed about the latest cybersecurity threats, vulnerabilities, and industry’s best practices.
Participate in routine code vulnerability scans and triage activities.
Assist in the implementation and maintenance of developer code security technologies including SAST, SCA, and DAST tools.
Coordinating penetration testing and other application testing.
Other general tasks as assigned.