Cyber Security Engineer

Project We are seeking a Cybersecurity Engineer to support thedevelopment and lifecycle management of a Secure Connectivity Board (SCB)product. This role will drive cybersecurity activities throughout the product lifecycle, ensuring security-by-design principles are embedded into product development and supporting compliance with applicable medical device cybersecurity requirements. Work The successful candidate will work closely with Engineering, Quality, Regulatory Affairs, and external security experts to ensure cybersecurity risks are properly identified, assessed, mitigated, and documented. Key Responsibilities • Design, implement, and maintain cybersecurity controls throughout the product lifecycle (design, development, deployment, and post-market activities). • Integrate Secure Software Development Lifecycle (Secure SDLC) practices into engineering processes. • Conduct threat modeling, cybersecurity risk assessments, and vulnerability analyses for connected devices. • Define cybersecurity requirements and security architecture recommendations. • Coordinate static and dynamic application security testing (SAST/DAST). • Coordinate and support penetration testing activities with external security experts. • Support the creation and maintenance of cybersecurity risk management documentation and technical files. • Collaborate with Engineering, Quality, Regulatory Affairs, and Product teams to ensure security-by-design principles are applied. • Monitor security vulnerabilities and support remediation activities. • Support post-market cybersecurity monitoring and vulnerability management activities. • Participate in incident response planning and security investigations when required. • Support the preparation of cybersecurity deliverables for regulatory submissions and audits. Technical Skills Experience with cybersecurity tools and technologies such as: Application Security & Code Analysis Experience with one or more of: Black Duck (or equivalent SCA tools)FortifyCheckmarxVeracodeSonarQube Vulnerability Management & Testing Experience with one or more of: NessusOpenVASBurp SuiteOWASP ZAPMetasploit Endpoint & Network Security Experience with: CrowdStrike, Carbon Black, or similar EDR solutionsWiresharkSnort, Suricata, or similar network security technologies Cloud & Infrastructure Security Exposure to: AWS Security Hub, Azure Security Center, or equivalent cloud security platformsInfrastructure-as-Code security tools (e.g., Checkov) DevSecOps & Automation Experience with: Jenkins, GitLab CI/CD, or similar pipelinesSecurity integration within CI/CD environmentsDocker and Kubernetes security concepts Regulatory & Standards Knowledge Awareness of the following standards and frameworks is beneficial: ISO 14971 Risk ManagementIEC 62304 Medical Device Software Lifecycle ProcessesIEC 81001-5-1 Health Software SecurityFDA Premarket and Post market Cybersecurity GuidanceNIST Cybersecurity FrameworkISO 27001HIPAA (where applicable) Preferred Qualifications Experience in medical device, healthcare, IoT, embedded systems, or other regulated industries.Familiarity with FDA cybersecurity guidance and regulatory expectations.Exposure to FDA 510(k) submissions.Familiarity with IEC 81001-5-1.Knowledge of SBOM (Software Bill of Materials) practices and requirements.Experience supporting penetration testing and remediation activities.Industry certifications such as CISSP, CEH, CSSLP, or equivalent. Our Offer • Support – You will have a Qdev buddy by your side • Flexibility – flexible working hours, vacation schedule • Online and offline training/workshops and other knowledge-sharing possibilities • Additional health and personal accident insurance • Snacks and fun activities in the office • Additional time off • Personal and sport budget • Loyalty benefits and perks • Agile, friendly and international environment • Gross salary in a range of 4400-7500 EUR (negotiable, based on competencies)