Sr. Cybersecurity Engineer
Core
Drive cybersecurity strategy and DevSecOps throughout the product lifecycle for medical devices, ensuring compliance with regulations.
Role type
Senior IC cybersecurity engineer (DevSecOps)
Builds
Secure medical device products and CI/CD pipelines
Domain
Medical devices / Healthcare / IoT
Required skills
DevSecOps, threat modeling (STRIDE), security risk assessments, secure coding, configuration management, patching, secrets management, identity and access management, regulatory compliance (FDA, TIR 57), NIST Cybersecurity Framework
Preferred skills
Embedded systems security, IoT cloud security
Technologies
DevSecOps tools, CI/CD pipelines
Responsibilities
Integrate security into the product development lifecycle; foster a collaborative security culture; collaborate with product teams to embed security controls in CI/CD; lead threat modeling and security risk assessments; define product security requirements and verification strategies; automate vulnerability detection and secure coding processes; implement risk mitigation strategies; oversee incident response plans; manage secrets and identity access; stay current with medical device security regulations; collaborate with internal stakeholders; model resiliency and lead security champions.
Seniority
Senior, hands-on IC