Senior Security Engineer (Security by Design)

About the role

Stryker is seeking a Senior Security Engineer to lead cybersecurity risk analysis, threat modeling, and mitigation for its medical products. You will collaborate with cross‑functional teams to ensure compliance with HIPAA, GDPR, and industry security standards.

Key responsibilities

• Lead product hardware and software security, including system hardening, penetration testing, and vulnerability scanning.
• Integrate automated security testing throughout the SDLC and develop security policies and procedures.
• Automate routine security tasks and data extraction using PowerShell, Ruby, or Python.
• Drive incident response, vulnerability & exposure assessments, and remediation of security incidents.
• Evaluate emerging security technologies and recommend adoption to improve the organization’s security posture.

Required profile

• Bachelor’s degree in Software Engineering, Computer Science, or a related field.
• 4+ years of experience in cybersecurity, preferably with medical or embedded devices.
• Experience with security standards such as NIST 800‑53, IEC 80001‑2‑8, IEC 27002, ISO 27799, IEC 15408‑2, IEC 62443‑3‑3.
• Knowledge of quality standards like IEC 62304, IEC 60601, and 21 CFR 820.
• Security certifications (e.g., CISSP‑ISSAP, CCSP, OSCP, CEH) are a plus.

Required skills

• PowerShell, Ruby, Python scripting.
• Penetration testing and vulnerability assessment.
• Threat modeling and risk assessment.
• Incident response and security incident management.
• Automated security testing integration.