> Markdown version of [/jobs/ext/936072-senior-principal-product-security-engineer](https://www.wearedevelopers.com/jobs/ext/936072-senior-principal-product-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Principal Product Security Engineer - **Company:** Alcon Inc - **Location:** Lake Forest, CA, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Software Security, Vulnerability Analysis - **Published:** June 14, 2026 - **Apply:** https://jobs.localjobnetwork.com/job/detail/70337227/Senior-Principal-Product-Security-Engineer ## About the Role * Bachelor's Degree or Equivalent years of directly related experience (or high school+15 yrs; Assoc.+14 yrs; M.S.+7 yrs; PhD+6 yrs) * The ability to fluently read, write, understand and communicate in English * 7 Years of Relevant Experience ## Description We foster an inclusive culture and are looking for diverse, talented people to join Alcon. As a Senior Principal Product Security Engineer supporting Research and Development you will be responsible for the end-to-end security of the assigned Alcon product(s) and working closely with R&D staff in achieving product and security objectives. In this role, a typical day will include: * Manage and implement security in assigned products * Understanding of the clinical use cases for software as a medical device (SaMD) and software in a medical device (SiMD) * Performing architecture reviews as part of product security process resulting in a product security architecture. * Building threat model and security risk assessments with prioritized items to be mitigated * Being a technical lead and guidance for product teams driving implementation of core security assets. * Developing security requirements and security use cases to address clinical environment * Influencing product features and roadmaps * Developing/contributing success criteria for security product/solution testing * Managing the requirements to realize security certification/regulatory documentation * Collaborating with product development team and cross-functional stakeholders. * Building capabilities, tools, and help automate where possible driving improvements to Alcon product security process and practices * Leading vulnerability analysis, core engineering assets in alignment with the security vision ## Related Videos - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece) - [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests) ## Related Articles - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)