Medical Devices Product Security Engineer

Description

The company is based in Waldkirch, Germany, and has been part of a Munich-based medical technology group since 2022.

For more than 25 years it has developed and sells innovative medical technology for intraoperative neuromonitoring and neurostimulation.

You join an international team and work on medical technology with a lasting impact.

The role covers cybersecurity for Windows-based medical devices across their whole product lifecycle.

Responsibilities

• Own the cybersecurity of Windows-based medical devices from concept through to end of life.
• Interpret and apply regulatory requirements and relevant standards, such as IEC 81001-5-1, IEC 62304 and ISO 14971.
• Carry out threat modeling, risk assessments and vulnerability analyses.
• Design, implement and verify technical security controls and measures.
• Plan and run security testing, and support SBOM and vulnerability management.
• Write the technical documentation and evidence needed for product approvals and regulatory submissions.
• Work closely with R&D, Quality Management, Regulatory Affairs and external partners.

Requirements

• Hold a Bachelor's or Master's degree in Computer Science, Information Security, Electrical Engineering, Medical Engineering or a related field.
• Have several years of cybersecurity experience, ideally in a regulated environment or the medical device industry.
• Know relevant cybersecurity standards and regulatory requirements well.
• Have experience with threat modeling, security risk management and vulnerability assessment.
• Have solid expertise in Microsoft Windows environments, such as Windows 10/11, Windows IoT or Embedded Windows.
• Have experience with system hardening, network security and security testing.
• Work in a structured, independent way, and communicate well in both German and English.

Conditions

You get 30 vacation days, plus December 24th and December 31st off.

Working hours are flexible.

Benefits

• Take part in regular team events and company events.
• Use the internal company fitness program.
• Access training and continuing education opportunities.