Product Security Quality Assurance Engineer (w/m/d)
Core
Plan and lead Security Verification and Validation for active medical devices, developing test strategies and integrating security functions into DevOps pipelines.
Role type
Senior IC product security quality assurance engineer (medical devices)
Builds
Secure development toolchains, vulnerability management solutions, and security gates in CI/CD pipelines for medical devices
Domain
Medical devices / Cybersecurity / DevSecOps
Required skills
Security testing (Penetration Testing, SAST, DAST, SCA), Vulnerability Management, DevSecOps, Threat Modeling, Security Requirements Management, IEC 62304/IEC 81001-5-1 compliance, C/C++/Python, Linux/Bare-metal systems
Preferred skills
CRA knowledge, validation of development/security tools, SBOM tools, Polarion, IriusRisk
Technologies
git, Linux, C/C++, Python, Polarion, IriusRisk, SBOM tools, CI/CD pipelines
Responsibilities
Plan and execute Security Verification and Validation for active medical devices; Develop Security Test Strategies and Specifications; Integrate Vulnerability Management tools and Security Gates into CI/CD pipelines; Analyze vulnerabilities and support prioritization and remediation; Support Threat Modeling and Residual Risk Assessments; Advise Product Teams on Security Test Strategies and SOPs
Seniority
Senior, hands-on IC