Job Description
Join to apply for the Staff Engineer, Product Security role at MillenniumSoft Inc
11 months ago Be among the first 25 applicants
Join to apply for the Staff Engineer, Product Security role at MillenniumSoft Inc
Get AI-powered advice on this job and more exclusive features.
Job Title - Staff Engineer, Product Security
Location - San Jose, CA Duration - 12+ Months Contract Total Hours/week - 40.001st Shift
Job Description Required MUST HAVE software testing experience
MUST HAVE experience with Windows Operating System (windows configuration and security)
MUST HAVE strong communication skills
MUST HAVE previous experience with product development and code scanning tools/ assessing vulnerability
Description - Product Security Prefer candidates local to position.
- Product Security will be responsible for working with software development teams to assess potential security vulnerabilities using recognized security standards and provide recommendations on resolving them. They must also have knowledge of operating systems as well as techniques and standards for security hardening (NIST SP 800-53, ISO/IEC 27001, OWASP, etc.). Potential candidates must be able to apply technical expertise and diagnostic skill to the evaluation of security vulnerabilities in combination with experience in security risk management to develop maintainable technical solutions. A successful candidate will thrive on working with other software engineers in a dynamic and collaborative development environment where meeting project goals and delivering quality is key.
Responsibilities - Lead product security risk assessments, hazard analysis, and provide vulnerability remediation guidance to product development software engineers.
- Implement software and OS security solutions in accordance with industry accepted standards for medical devices including: encryption, recovery, authentication, audit logging, hardening measures, patch management, vulnerability monitoring, and antivirus/antimalware.
- Develop and administer software engineering procedures and training for vulnerability scanning and static code analysis tools.
- Support systems for automated testing of software vulnerabilities and verification of OS security patches.
- Assist product development teams in creating security documentation including Incident and Vulnerability Management Plans and Product Security White Papers.
- Participate on product security incident response teams as appropriate.
- Participate in technical design reviews and code inspections and provide clear, actionable feedback for project team members, including demonstrating proper coding practices.
- Work with the project teams to develop necessary requirements, specifications and testing scope for OS configuration and patch verification for products.
- Ensure quality in security test deliverables, including design, data summary and interpretation, report and document preparation and review for adherence to applicable regulations.
Qualifications Required - Minimum of a Bachelors Degree in Electrical Engineering, Computer Science or related engineering field.
- Minimum of 4 years of experience in software development.
- Minimum of 3 years of experience in product development within a quality management system.
- Minimum of 2 year of experience in secure coding practices.
- Experience with use and reporting from static code analysis and vulnerability scanning tools.
- Demonstrated positive work ethic with a strong commitment to achieving project goals.
- Excellent written and oral communication skills are essential.
- Experience with the Agile / Scrum development lifecycle. Preferred
- 3 years of experience developing with C# and .NET frameworks or JavaScript.
- 2 years of experience with Agile / Scrum development lifecycle.
- 2 years of experience in medical devices / regulated environment.
- Knowledge of information security standards for product development.
- Experience with cyber security risk assessment and threat modeling.
- Knowledge of Windows OS configuration (ex. security, group policies, remote access).
- Experience with Database access management and security policies. Prefer candidates local to position..
Seniority level
Seniority level
Mid-Senior level
Employment type
Employment type
Full-time
Job function
Job function
Information Technology Industries
Staffing and Recruiting
Referrals increase your chances of interviewing at MillenniumSoft Inc by 2x
Software Engineer, AI Intern (Fall 2025)
San Francisco Bay Area $57.00-$61.00 2 weeks ago
Mountain View, CA $125,400.00-$188,100.00 2 weeks ago
Software Engineer, AI Platform - New Grad
San Jose, CA $130,000.00-$180,000.00 2 weeks ago
New Grads 2025 - Software Engineer, Algorithm
San Jose, CA $120,000.00-$165,000.00 9 months ago
New Grads 2025 - General Software Engineer
San Jose, CA $120,000.00-$165,000.00 5 months ago
Software Engineer (L4), Content & Business Products
Full Stack Software Engineer - Post-training
San Jose, CA $142,400.00-$190,100.00 2 weeks ago
Palo Alto, CA $96,000.00-$200,000.00 10 hours ago
Software Engineer 4 - TV & Web Player Platform
San Jose, CA $113,400.00-$206,300.00 2 weeks ago
Software Engineer - Intern (Summer 2025)
San Jose, CA $3,000.00-$4,000.00 8 months ago
San Jose, CA $113,400.00-$206,300.00 2 weeks ago
San Jose, CA $133,900.00-$242,000.00 3 days ago
San Jose, CA $113,400.00-$206,300.00 2 weeks ago
San Jose, CA $113,400.00-$206,300.00 2 weeks ago
San Jose, CA $100,500.00-$173,250.00 1 week ago
Software Engineer(s) - New Grad (Fall 2025 Graduation)
Palo Alto, CA $152,400.00-$228,700.00 2 weeks ago
Sunnyvale, CA $117,000.00-$234,000.00 2 weeks ago
Santa Clara, CA $150,000.00-$175,000.00 7 months ago
(General Hire) Software Engineer Graduate (Advertisement Team) - 2025 Start (BS/MS)
San Jose, CA $113,500.00-$250,000.00 2 weeks ago
Mountain View, CA $130,000.00-$176,000.00 1 week ago
Software Engineer(s) - New Grad (Fall 2025 Graduation)
Were unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr
Job Tags
Full time, Contract work, Summer work, Local area, Remote work, Day shift,