16 Sep
|
Zinnov Management Consulting
|
Bengaluru
16 Sep
Zinnov Management Consulting
Bengaluru
Job description
Zinnov is hiring for the role of Professional, Product Security Engineer on behalf of our Global MNC MedTech client company a company where technology sits at the centre of everything: powering how the core business operates day to day and shaping the products and digital solutions that will define the future of patient care. This role is part of the companys establishment of their recent India Global Capability Centre (GCC) in Bengaluru which will drive enterprise technology, digital transformation and innovation for its global operations and contributing to technology that ultimately helps millions of people around the world.
How you'll make an impact
- Lead customer, hospital, and third-party security questionnaire responses, establishing reusable evidence, ownership, review, approval, and response-SLA processes.
- Own creation, maintenance, version control, and quality review of MDS2 documentation in partnership with Product Security, Regulatory, Quality, and engineering teams.
- Govern the SBOM lifecycle including generation, ingestion, validation, storage,
versioning, component provenance, vulnerability correlation, and release alignment.
- Work with SBOM/SCA platforms such as Black Duck, Snyk, Mend, Sonatype Lifecycle, Anchore, Dependency-Track, Syft/Grype, Wiz, or equivalent and support SPDX / CycloneDX formats.
- Correlate SBOM components with NVD, CISA KEV, vendor advisories, CVSS/EPSS, and product risk assessments to support remediation and disclosure decisions.
- Design or improve questionnaire and evidence workflows using platforms such as ServiceNow IRM, OneTrust, Whistic, ProcessUnity, or equivalent customer-assurance/GRC tooling.
- Automate data collection and evidence exchange using APIs, workflow tools, scripting, and integrations with engineering, vulnerability-management, and document repositories.
- Maintain traceable technical documentation aligned with FDA cybersecurity expectations, IEC 81001-5-1, AAMI TIR57, NIST SSDF, and oth
📌 Product Security Engineer (Bengaluru)
🏢 Zinnov Management Consulting
📍 Bengaluru