Sr Engineer II, Product Security

Danaher•Irvine, CA

1d•$140,000 - $170,000•Onsite

About The Position

The Sr Engineer II, Product Security supports the implementation of secure-by-design principles across Masimo's software platforms. This role works closely with software, algorithms, quality, regulatory, and product teams to ensure cybersecurity is integrated throughout the software development lifecycle for our medical devices. This role focuses on hands-on execution of product security activities, including third-party application and driver review, vulnerability assessment, security patch release processes, and cybersecurity lifecycle management - in support of Masimo's broader product security strategy.

Requirements

B.S. Degree in computer science, cybersecurity, software engineering, or a related technical field.
8+ years of experience in software engineering, including 3+ years focused on cybersecurity or product security.
Working knowledge of secure software design, application security, and cryptography technologies.
Experience with threat modeling, vulnerability assessment, and risk-based security decision-making.
Experience integrating cybersecurity practices into the software development lifecycle.
Experience working in agile development environments.

Nice To Haves

Experience supporting cybersecurity in regulated industries such as medical devices, healthcare technology, or other safety-critical environments.
Familiarity with industry frameworks such as NIST, ISO 27001, OWASP, or similar cybersecurity standards.
Experience with cloud-native architectures, embedded systems, or hybrid software ecosystems.
Relevant certifications such as CISSP, CSSLP, or equivalent.
Experience managing information security within a medical device manufacturing environment.

Responsibilities

Support secure-by-design implementation across Masimo's software platforms, including participation in threat modeling, architecture reviews, and risk assessments for assigned products.
Drive security patch release process for addressing product vulnerability and secure controls in the software.
Perform impact assessments and execute security testing methods to validate the security posture of product and software updates.
Partner with software engineering teams to integrate cybersecurity practices into CI/CD pipelines and DevSecOps workflows.
Collaborate with Quality, Regulatory, and Risk Management teams to support cybersecurity compliance and product lifecycle security activities.