Embedded Systems Cyber ​​Security Engineer (d/f/m)

The purpose of the position

In the Software & Electronics Engineering department , we develop innovative concepts for software and hardware solutions in the field of prosthetics and orthotics.

We are looking for an Embedded Systems Cyber ​​Security Engineer (m/f/d) for our headquarters in Duderstadt near Göttingen .

Tasks

• In this role, you will develop low-level embedded software in C++ - especially for microcontrollers of the STM32 family.
• Your tasks also include the development and integration of software systems in RTOS environments.
• You are responsible for the cybersecurity and security risk management of medical devices.
• You develop secure and regulatory-compliant system architectures, taking cybersecurity requirements into account.
• You will be responsible for preparing, conducting, and moderating risk analyses and threat modeling, e.g., according to STRIDE, and will derive appropriate protective measures.
• You integrate, implement, and evaluate security controls, and you also plan and conduct penetration tests.
• You create, maintain, and further develop regulatory cybersecurity documentation for connected medical devices.
• You evaluate third-party software and perform vulnerability management – ​​including monitoring, prioritization, and assessment of vulnerabilities, e.g., using CVSS.
• You act as the interface between embedded development, app/cloud teams and regulatory affairs, and contribute to the further development of security processes, e.g. Secure Design Rules, SAST, DAST, SCA and PSIRT-related processes.

profile

• You have successfully completed your studies in the field of computer science, electrical engineering, medical engineering - or a comparable course of study.
• You have 5 to 8 years of professional experience in the development of embedded systems.
• You have very good knowledge of embedded software development with C++ - especially in low-level programming.
• You have experience in developing software solutions for real-time operating systems (RTOS).
• You can demonstrate sound knowledge of cybersecurity principles for embedded systems as well as typical attack vectors and protective measures.
• You are experienced in risk analysis, threat modeling and vulnerability assessment - ideally with methods such as STRIDE, OWASP or CVSS.
• You are familiar with regulatory requirements and standards in the field of networked medical devices, e.g., IEC 81001-5-1, ISO 14971, MDR or FDA guidance.
• You are characterized by an analytical and structured way of thinking and working.
• You are a team player, committed and reliable
• Your German and English skills are at a negotiation-level fluency, both spoken and written.

Benefits

• A meaningful job in the medical technology industry, where you have a positive impact on people's mobility.
• Attractive remuneration as well as Christmas and holiday bonuses
• 30 days of vacation
• Pension benefits: Company pension scheme, employee savings plan
• Flexibility: Flexible working hours and mobile working within Germany (after consultation with your manager) - please only apply if you can be in Duderstadt regularly.
• Health & Wellbeing: EGYM Wellpass, external consulting for private and professional concerns, occupational health services
• Mobility: Bicycle leasing (JobRad & Bikeleasing)
• Discounts & special offers: Corporate benefits and offers from local partners