Support cybersecurity risk analysis and threat modeling and develop mitigation strategies to develop secure medical products. Work closely with cross-functional teams, including Quality, Regulatory, and Marketing, in driving alignment around product Cybersecurity, HIPAA, and GDPR compliance. Support or lead in all product hardware and software security facets, including systems hardening, automated and manual penetration testing, automated vulnerability scanning for compliance, and issue remediation. Lead manual and automated code reviews for complex embedded and clinical application software to identify security flaws. Develop and implement security policies and procedures to ensure compliance with industry standards. Automate routine tasks and extract valuable data using various scripting languages like PowerShell, Ruby, or Python. Lead cybersecurity documentation requests from legal and sales teams as needed. Support or lead incident response, V&E assessments and manage the resolution of security incidents.
Support cybersecurity risk analysis and threat modeling and develop mitigation strategies to develop secure medical products
Work closely with cross-functional teams, including Quality, Regulatory, and Marketing, in driving alignment around product Cybersecurity, HIPAA, and GDPR compliance
Support or lead in all product hardware and software security facets, including systems hardening, automated and manual penetration testing, automated vulnerability scanning for compliance, and issue remediation
Lead manual and automated code reviews for complex embedded and clinical application software to identify security flaws
Develop and implement security policies and procedures to ensure compliance with industry standards
Automate routine tasks and extract valuable data using various scripting languages like PowerShell, Ruby, or Python
Lead cybersecurity documentation requests from legal and sales teams as needed
Support or lead incident response, V&E assessments and manage the resolution of security incidents
Requirements
NISTCISSP
Bachelor's degree in software engineering/ computer science or related discipline & 3+ years of work experience
Understanding one or more security standards/frameworks like NIST 800-53, IEC80001-2-8, IEC 27002, ISO 27799, IEC 15408-2, and IEC 62443-3-3
Solid understanding of Linux operating systems
Experience in securing medical devices or embedded devices
Experience with threat modeling, VAPT and risk assessment
Experience with security requirements, data security, malware analysis, vulnerability assessment, and penetration testing using off-the-shelf tools and techniques
Understanding of networking concepts
Understanding quality standards like IEC 62304, IEC 60601, and 21CRF 820
Security certifications such as CISSP-ISSAP, CCSP, OSC
About Stryker
Stryker Corporation is a global leader in medical technology, founded in 1941 by Dr. Homer Stryker, an orthopedic surgeon. Initially known as The Orthopedic Frame Company, it began by creating innovative medical devices, including the turning frame and cast cutter. The company was renamed Stryker Corporation in 1964 to reflect its expanding range of products and services. Stryker's extensive product portfolio includes orthopedic implants, surgical equipment, neurotechnology, and robotics. Key offerings feature joint replacement implants, powered surgical instruments, and devices for neurological and spinal surgeries. The company is dedicated to improving patient outcomes and enhancing surgical efficiency through its advanced medical devices and digital health solutions. Stryker serves a diverse customer base, including hospitals and healthcare providers worldwide, and is committed to innovation and global expansion in the medical technology sector.
