Digital Product Security Engineer

At Alcon, we are driven by the meaningful work we do to help people see brilliantly. We innovate boldly, champion progress, and act with speed as the global leader in eye care. Here, you'll be recognized for your commitment and contributions and see your career like never before. Together, we go above and beyond to make an impact in the lives of our patients and customers.

We foster an inclusive culture and are looking for diverse, talented people to join Alcon. As a Digital Product Security Engineer supporting Engineering team, you will be trusted to work on integrating product security into Alcon products, services, and digital solutions. The product security engineer is knowledgeable in cybersecurity concepts, technology and tools, security standards, and related processes at Lake Forest, California (or remote). In this role, a typical day will include:

• Building strong partnership with the product teams
• Implement proposed security controls/methods to software, applications, systems, and digital solutions for the assigned medical device product(s)
• Develop and track cybersecurity bill of materials (CBOM)
• Support product security risk assessments, requirements analysis, and test methods
• Execute product security testing including test planning, cases, and procedure development
• Perform vulnerability assessment and software scanning (Static/Dynamic)
• Identify potential software security vulnerabilities and collaborate with R&D product teams for remediation and planning
• Contribute to technical feasibility studies, proof of concepts, and technology evaluations as needed for new product security capabilities
• Participate in security innovation and research activities for the next generation products
• Support in product security compliance/regulatory documentation as needed
• Participate in improvement projects related to Alcon product security process, technology and tools, and practices
• Support API, cloud security designs, and solutions

WHAT YOU'LL BRING TO ALCON:

• Bachelor's Degree or equivalent years of directly related experience (or high school +10 years; Assoc.+6 years; M.S.+0 years; PhD+0 years)
• The ability to fluently read, write, understand, and communicate in English
• 3 years of relevant experience
• Basic knowledge in cybersecurity, software engineering, product development
• Problem-solving, logical reasoning, and analytical skills

Preferred Qualifications:

• Industry experience in a regulatory environment
• Working knowledge in Cybersecurity with software/application or product development or embedded software and systems
• Knowledge in programming languages like Java, Python, C++/C/C#, PHP, etc.
• Knowledge in security testing, test methods, and related tools

HOW YOU CAN THRIVE AT ALCON:

• Benefit from working in a highly collaborative environment.
• Join Alcon's mission to provide outstanding, innovative products and solutions to improve sight, improve lives, and grow your career!
• Alcon provides robust benefits package including health, life, retirement, flexible time off, and much more!
• Travel Requirements: 15%
• Relocation assistance: Yes
• Sponsorship available: No

Alcon is an Equal Opportunity Employer and participates in E-Verify. Alcon takes pride in maintaining a diverse environment and our policies are not to discriminate in recruitment, hiring, training, promotion or other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, gender identity, marital or veteran status, disability, or any other legally protected status. Alcon is also committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, or in order to perform the essential functions of a position, please send an email to [email protected] and let us know the nature of your request and your contact information.