Firmware and Product Security Technical Lead

Description Technical Lead - Firmware and Product Security (Level 5) Position Summary The Technical Lead - Firmware and Product Security (Level 5) is a senior role responsible for the architecture, development, verification, and lifecycle security of embedded firmware used in connected medical devices. This role establishes technical direction, leads complex and high-impact initiatives, and ensures that firmware and product-security controls are designed into products from concept through post-market support. The position partners across Systems, Hardware, Software, Quality, Regulatory, Information Security, Manufacturing, and Program Management to translate product and security needs into robust, maintainable, and compliant solutions. The lead remains hands-on in design, implementation, review, debugging, and risk resolution while mentoring engineers and raising organizational capability in secure product development. Key Responsibilities Own the technical vision and roadmap for embedded firmware and product security across assigned connected medical-device platforms. Lead firmware architecture, requirements decomposition, interface definition, design reviews, implementation, integration, verification, and release readiness for safety- and business-critical features. Establish firmware architecture secure-by-design practices, including threat modeling, security risk assessment, attack-surface analysis, secure boot, authentication, cryptography, key management, access control, secure communications, logging, and secure update mechanisms. Translate system, clinical, user, safety, privacy, and cybersecurity needs into clear firmware requirements and testable acceptance criteria with bidirectional traceability. Provide hands-on technical leadership in C/C++, RTOS-based systems, device drivers, board bring-up, bootloaders, communication protocols, connectivity, diagnostics, and performance optimization. Drive disciplined engineering practices, including coding standards, peer reviews, static and dynamic analysis, unit and integration testing, automated builds, CI/CD, configuration management, and defect prevention. Lead technical investigations and root-cause analysis for complex firmware, hardware-interface, connectivity, performance, reliability, and security issues; ensure effective corrective and preventive actions. Partner with Quality and Regulatory teams to produce and maintain design history, software lifecycle, cybersecurity, risk-management, verification, and submission documentation consistent with applicable medical-device requirements. Support product-security activities throughout the lifecycle, including vulnerability monitoring, coordinated vulnerability response, third-party component assessment, software bill of materials governance, security testing, and post-market remediation. Evaluate technical tradeoffs involving safety, security, performance, power, memory, cost, schedule, manufacturability, serviceability,…