What are the responsibilities and job description for the Product Cyber Security Engineer position at Rapiscan Systems?
Overview
Rapiscan, an OSI Systems Company is seeking a Cyber Security Engineer, based out of Billerica, MA.
Rapiscan Systems, an OSI Systems, Inc. company, designs, manufactures and markets security and inspection systems worldwide. Our products are used to inspect baggage, cargo, people, vehicles and other objects for weapons, explosives, drugs and other contraband. Rapiscan Systems security and inspection devices can be found in a wide range of locations such as airports, border crossings, railway stations, seaports and terminals, government and military installations, and nuclear facilities.
We are seeking a highly capable Product Cyber Security Engineer to join our Rapiscan Product Security and IT Team. The role is responsible for secure‑by‑design engineering, operational security, and continuous improvement of cyber resilience in line with recognised frameworks and regulatory requirements.
This is a hands‑on engineering role, working closely with IT, Product Development, Engineering, and GRC teams to translate security requirements into practical, effective technical controls
Responsibilities
The pay range above represents annual base salary only. Final compensation will be determined based on factors such as your job level, geographic location, date of hire, experience, job-related knowledge and skills, and education in conjunction with market and business considerations.
Base salary is one component of your total rewards package. You may be eligible for long-term incentives, potential discretionary bonuses, and the ability to purchase company stock at a discounted rate through the Employee Stock Purchase Program (ESPP). OSI also offers comprehensive benefits including various options for health plans, access to 401(k) retirement plan, health savings account, disability insurance, life insurance, AD&D insurance, leave of absence programs and an array of voluntary benefits. In addition, paid time off is offered to be used for vacation, holidays, bereavement, and jury duty. Full-Time salaried employees are entitled to flexible time-off.
NOTICE TO THIRD PARTY AGENCIES
OSI Systems, Inc. and its subsidiaries (collectively “OSI”) does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.
Equal Opportunity Employer - Disability and Veterans
Know Your Rights
Poster Link
https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf
OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for original equipment manufacturers with applications in the defense, aerospace, medical and industrial markets, among others.
Rapiscan, an OSI Systems Company is seeking a Cyber Security Engineer, based out of Billerica, MA.
Rapiscan Systems, an OSI Systems, Inc. company, designs, manufactures and markets security and inspection systems worldwide. Our products are used to inspect baggage, cargo, people, vehicles and other objects for weapons, explosives, drugs and other contraband. Rapiscan Systems security and inspection devices can be found in a wide range of locations such as airports, border crossings, railway stations, seaports and terminals, government and military installations, and nuclear facilities.
We are seeking a highly capable Product Cyber Security Engineer to join our Rapiscan Product Security and IT Team. The role is responsible for secure‑by‑design engineering, operational security, and continuous improvement of cyber resilience in line with recognised frameworks and regulatory requirements.
This is a hands‑on engineering role, working closely with IT, Product Development, Engineering, and GRC teams to translate security requirements into practical, effective technical controls
Responsibilities
- Design and implement cyber security controls across IT, OT, and Product environments.
- Support secure system and product architecture review, ensuring security is embedded throughout the lifecycle.
- Develop and maintain hardening standards, secure configuration baselines, and engineering patters.
- Provide technical input into threat modeling and risk assessment.
- Support secure development practices for products and embedded systems.
- Contribute to compliance with standards such as NIST 800-53, IEC62443 and NIST secure development lifecycle requirements.
- Work with Engineering teams to implement security controls that balance safety, availability, and cyber risk.
- Implement technical controls aligned to frameworks such as NIST and IEC62443.
- Support audits, assessments, and customer security questionnaires with technical evidence.
- Maintain clear technical documentation and configuration records.
- Uphold the company's core values of Integrity, Innovation, Accountability, and teamwork.
- Demonstrate behavior consistent wit the company's Code of Ethics and Conduct.
- It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem.
- Duties may be modified or assigned at any time to meet the needs of the business.
- Bachelor’s degree in Computer Science, Information Security, Engineering preferred. Relevant experience may be substituted.
- 5 years of work experience in information technology with a focus and understanding of cloud security principles and best practices required.
- Strong experience with Windows and/or Linux system hardening.
- Understanding of network security concepts (firewalls, segmentation, VPNs, IDS/IPS).
- Experience with vulnerability management and remediation processes.
- Knowledge of embedded systems or secure development practices.
- Solid understanding of cyber security principles, threats, and attack techniques.
- Experience supporting audits or customer security assessments.
- Familiarity with CMMC, NIS2, Cyber Essentials Plus, or similar schemes.
- Relevant certifications preferred. (e.g. CISSP, GSEC, Security , CEH, GIAC).
- Strong problem-solving and analytical skills.
- Ability to communicate technical risks clearly to non-technical stakeholders.
- Comfortable working collaboratively across engineering, IT, and compliance teams.
- Self-motivated with a continuous improvement mindset.
- Ability to obtain a Security Clearance.
- Ability to travel as required, less than 10%.
The pay range above represents annual base salary only. Final compensation will be determined based on factors such as your job level, geographic location, date of hire, experience, job-related knowledge and skills, and education in conjunction with market and business considerations.
Base salary is one component of your total rewards package. You may be eligible for long-term incentives, potential discretionary bonuses, and the ability to purchase company stock at a discounted rate through the Employee Stock Purchase Program (ESPP). OSI also offers comprehensive benefits including various options for health plans, access to 401(k) retirement plan, health savings account, disability insurance, life insurance, AD&D insurance, leave of absence programs and an array of voluntary benefits. In addition, paid time off is offered to be used for vacation, holidays, bereavement, and jury duty. Full-Time salaried employees are entitled to flexible time-off.
NOTICE TO THIRD PARTY AGENCIES
OSI Systems, Inc. and its subsidiaries (collectively “OSI”) does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.
Equal Opportunity Employer - Disability and Veterans
Know Your Rights
Poster Link
https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf
OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for original equipment manufacturers with applications in the defense, aerospace, medical and industrial markets, among others.