Requisition Number 2632

Location US - Marlborough, MA

State/Territory Massachusetts

Candela Corporation is a leading global aesthetic device company with a comprehensive product portfolio consisting of globally recognized product brands. Candela has the largest direct commercial infrastructure globally, a global distribution footprint and is a market leader in the development, manufacturing, and distribution of medical and aesthetic laser, energy, and light-based technologies. The Company’s technology enables physicians to provide advanced solutions for a broad range of medical-aesthetic application including hair removal, tattoo removal, skin rejuvenation, benign vascular and pigmented lesions, wrinkle reduction, and the treatment of acne, leg veins, scarring and other common indications.

Candela develops products from concepts developed by our world-class team of scientists and engineers or as acquired or licensed technologies. Candela then completes the development and/or commercialization of these products through a comprehensive global clinical and regulatory plan that establishes the clinical efficacy and safety that is paramount to the Candela brand. All development and launch programs are supported by Candela’s global clinical, regulatory, and quality teams and are managed through our Product Development Process (PDP) and Quality Management System (QMS).

The Company is headquartered in Marlborough, Massachusetts, USA, with an additional R&D facility in Yokneam, Israel and commercial locations across Asia Pacific, and Europe. Products are sold directly in 18 countries worldwide and are supported by capital sales, field service, clinical education, technical support, and marketing development organizations. Candela maintains contracted distributors in over 60 other countries.

General Summary

We are looking for an experienced Senior Security Software Engineer to join the Global R&D engineering team in the Marlborough, MA office headquarters to be a member of a team that creates, designs and tests highly complex medical aesthetic devices. As the Senior Software Security Engineer, you will lead software security in the company’s products and services. You will evaluate product designs and provide solutions to remediate security vulnerabilities through product security risk assessments, vulnerability scans, and static/dynamic code analysis. In addition to security solutions for new product development, the role requires remediating vulnerabilities with existing products which requires detailed attention to implementation and product risk. In this role you will participate in a full medical software development life cycle and adhere to Candela Medical quality management system.

Essential Job Functions

Design and Implement software security solutions in accordance with industry accepted standards for cryptography engineering, recovery, authentication, audit logging, hardening measures, patch management, vulnerability monitoring, and antivirus/antimalware.
Develop and administer software engineering procedures and training for vulnerability scans and static/dynamic code analysis.
Lead product security risk assessments, hazard analysis, and provide vulnerability remediation guidance and mentoring to product development software engineers.
Participate in all Software Development Life Cycle phases.
Manage and document OTS/SOUP.
Responsible to develop and write software security requirements and related documentation.
Work closely with test engineers to support the development and modification of test cases.
Write code according to professional and established Candela standards.
Mentor software team members in areas of cybersecurity.
Design and integrate security into Candela DevOps.
Effectively communicates verbally and in writing across multiple Global functions and levels of the organization.
Work with cross functional teams and be familiar with business vision and requirements.
Be a great team player!

Required

Degree Engineering (Computer, Software, Electrical), Computer Science or other related Engineering discipline.

7+ years’ experience in developing complex multi-threaded web/desktop applications using C# .NET.
5+ year experience in working with major cloud providers (Azure, AWS, GCP).
Knowledge of common security standards and best practices, such as NIST 800-160, ISO 270xx, CWE, CVSS, OWASP Top 10, CERT Secure Coding Standards.
Knowledge of medical devices security standards and best practices, such as TIR57, TIR97, UL2900-1/2, ISO/IEC 15408, various FDA guidance and standards for Cybersecurity.
Knowledge of Windows hardening techniques.
Deep understanding of Threat Modeling techniques.
Experience in working with design patterns.
Experience in developing automated software unit tests.
Experience in Continuous Integration/Continuous Deployment (CI/CD).
Expert knowledge in GIT source control.
Experience in the participation in Software Development Life Cycle phases.
Ability to understand and resolve problems at both system and code levels.
Excellent communication skills.

Preferred, Nice To Have

Experience in design/development of complex medical device SW is a big plus (IEC 62304).

Experience with server less applications, databases or IoT SW solutions.

Experience working in a regulated environment and adhering to a quality management system.

Experience working with embedded systems, RTOS.

Cybersecurity certifications, preferably CISSP

Candela Corporation

New Jobs

Senior Software Security Engineer