Provides cybersecurity advisory services for medical devices and software, including risk assessments, secure design and development guidance, HIPAA and ePHI compliance, audit support, security reporting, and product documentation. Partners with cross-functional development and product teams, monitors threats, and supports vulnerability scanning, SAST, SCA, DAST, penetration testing, and application security procedures.
Mirion is seeking a motivated and enthusiastic Senior Product Cybersecurity Specialist to support Mirion’s medical and technologies product lines. The specialist will play a crucial role providing cybersecurity advisory services and HIPPA guidance to product owners, sales teams, and developers in the form of providing security guidance, reviews, and compliance information. Additionally, this role will build out processes and technical capabilities as assigned to support the Product Cybersecurity mission.
Primary Responsibilities
- Support cybersecurity risk assessments for connected medical devices and software per US HHS and FDA guidance.
- Provide cybersecurity recommendations and guidance to product development teams on secure design, coding, and development.
- Assist with gathering evidence and providing information for external audits and customer security inquiries for HIPPA and ePHI related security controls and for frameworks such as ISO 27001 and SOC 2.
- Document and write product risk assessment and security control reports.
- Review and aid with writing cybersecurity related information for product documentation.
- Participate in product project meetings as the cybersecurity representative.
- Collaborate with cross-functional teams to ensure cybersecurity best practices are integrated into product development and support.
- Stay informed about the latest cybersecurity threats, vulnerabilities, and industry’s best practices.
Potential Additional Responsibilities
- Participate in routine code vulnerability scans and triage activities.
- Assist in implementation and creating procedures around the use of developer code security technologies including SAST, SCA, and DAST tools.
- Coordinating penetration testing and other application security testing.
- Other general tasks as assigned.
Required Qualifications and Experience
- Bachelor’s degree in information technology, information security, or related field or equivalent practical experience.
- Experience: 4+ years in a cybersecurity-focused role, with exposure to cybersecurity governance, risk, and compliance.
- Working knowledge of the HIPAA Security Rule (45 CFP Part 160/164) and Privacy/Breach Notification Rules.
- Familiarity with FDA's "Cybersecurity in Medical Devices" premarket/postmarket guidance.
- Familiarity with cybersecurity frameworks such as ISO 27001, IEC 62443, NIST 800-171, SOC 2, and Cyber Essentials.
- Experience with HIPPA regulations and the HITRUST security framework.
- Experience with software application architecture and secure software development practices.
- Experience with embedded systems and associated security considerations.
- Good understanding of cybersecurity concepts and best practices to secure hardware and software components.
- Strong communication skills and a collaborative working style.
- Desire to work and learn.
Desired Qualifications and Experience
- Familiarity with international cyber industry regulations such as EU GDPR, and EU Cyber Resilience Act.
- Understanding of SBOM concepts and code/application vulnerability management tools.
- Experience with secure coding practices.
- Experience with Azure and AWS cloud security.
Similar Jobs
Fintech • Mobile • Software • Financial Services
Processes regular and off-cycle U.S. payroll, calculates wages and deductions, reconciles payroll reports, validates timekeeping data, resolves employee inquiries, supports audits, maintains compliance with payroll regulations and SOX controls, documents procedures, and recommends process improvements.
Top Skills:
GmailJIRAExcelMicrosoft Office SuiteServicenowSoxWorkday
Fintech • Mobile • Software • Financial Services
Supports the Litigation and Arbitration group through end-to-end matter management, document collection and review, legal holds, invoice and vendor tracking, litigation tracking, and legal workflow management. The paralegal assists in-house counsel with complex legal requests, coordinates with attorneys and outside counsel, supports subpoena and e-filing processes, and manages multiple deadlines while maintaining confidentiality and accuracy.
Top Skills:
Atlassian JiraCounsellinkLegal TrackerLexisnexisPacerRelativity
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Build and maintain dbt data models, SQL transformations, ingestion pipelines, orchestration, and Tableau dashboards in support of HR and enterprise analytics. Own data quality, metric standardization, privacy controls, Row-Level Security, documentation, CI/CD, and troubleshooting from source systems through reporting. Partner with stakeholders to define requirements and KPIs, support workforce forecasting, optimize BigQuery performance, and pilot AI-assisted analytics using Google Gemini.
Top Skills:
AirbyteApache AirflowCi/CdCloud ComposerDbtFivetranGitGoogle BigqueryGoogle Cloud PlatformGoogle GeminiPythonSQLTableau CloudTableau DesktopTableau Server
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
