Product Security Engineer

Hologic is seeking a Product Security Engineer to protect innovative healthcare and diagnostics technologies that improve women's health. As part of the IT & Cybersecurity team, you will embed security into product design, development, and deployment across cloud and on prem environments. You'll lead threat modeling, secure code review, and vulnerability management, collaborating closely with engineering teams to enhance secure SDLC practices. In Hologic's inclusive, growth oriented culture, you will help advance patient outcomes by ensuring our medical technology remains resilient, compliant, and secure.

Responsibilities

• Embed security into the design and development of Hologic's healthcare and diagnostics products.
• Perform threat modeling, code reviews, and security testing across applications and cloud services.
• Manage vulnerability scanning, triage, remediation, and reporting with engineering teams.
• Partner with IT, Dev
• Ops, and Cybersecurity to mature secure SDLC practices and tooling.
• Ensure compliance with healthcare security standards (HIPAA, HITRUST, NIST, OWASP).
• Develop security requirements, patterns, and reference architectures for product teams.
• Guide incident response related to product and application security issues.
• Provide security training and mentorship to developers and engineers.

Required Skills

• Application security
• Cloud security (AWS/Azure)
• Secure SDLCThreat modeling
• Static/Dynamic code analysis (SAST/DAST)
• Vulnerability management
• Penetration testing
• Network security
• Secure architecture design
• Security standards (HIPAA, HITRUST, NIST, OWASP)