Principal Product Security Cloud Engineer

Apply now: Principal Product Security Cloud Engineer, location is Hybrid (Remote/Onsite). The start date is ASAP for this contract position.

Job Title: Principal Product Security Cloud Engineer
Location-Type: Hybrid (Remote/Onsite – US East Coast hours)
Start Date Is: ASAP
Duration: Contract
Compensation Range: $150-170k Bonus
Benefits: Eligible for Health, Dental, Vision, 401K, PTO
Not eligible for Visa sponsorship

Job Description:
This role is responsible for leading cloud and product security initiatives, ensuring secure design, compliance, and risk mitigation across connected medical device ecosystems.

Day-to-Day Responsibilities:

• Develop and maintain product security documentation (threat models, risk assessments, SBOM, etc.)
• Design and implement cloud security controls within Azure environments
• Collaborate with engineering teams to integrate security into DevOps/CI-CD pipelines
• Perform security risk assessments for cloud and application infrastructure
• Define and enforce cryptographic standards (PKI, encryption, key management)
• Support regulatory submissions with security documentation (FDA, etc.)
• Conduct vulnerability management, including SAST, SCA, and penetration testing coordination
• Implement secure device-to-cloud communication (IoT security, Zero Trust, mTLS)
• Monitor post-market vulnerabilities and support remediation efforts

Requirements:

• Strong experience with Microsoft Azure and cloud security architecture
• Hands-on experience with threat modeling, risk assessments, and security documentation
• Deep understanding of PKI, encryption, and certificate management
• Experience in medical device or regulated environments
• Knowledge of security tools (e.g., Snyk, Veracode, Wiz)
• Experience working in DevSecOps / Agile environments
• Familiarity with compliance frameworks (NIST, ISO 27001, SOC2, HIPAA, etc.)
• Experience securing IoT or device-to-cloud systems
• Strong communication and cross-functional collaboration skills

• Experience with FDA regulatory submissions
• Knowledge of containerization (Docker, Kubernetes)
• Experience with Zero Trust architecture and cloud HSMs