Cybersecurity Engineer

We are seeking a Cybersecurity Engineer to support thedevelopment and lifecycle management of a Secure Connectivity Board (SCB)product.

This role will drive cybersecurity activities throughout the product lifecycle, ensuring security-by-design principles are embedded into product development and supporting compliance with applicable medical device cybersecurity requirements.

The successful candidate will work closely with Engineering, Quality, Regulatory Affairs, and external security experts to ensure cybersecurity risks are properly identified, assessed, mitigated, and documented.

Key Responsibilities

• Design, implement, and maintain cybersecurity controls throughout the product lifecycle (design, development, deployment, and post-market activities).
  
• Integrate Secure Software Development Lifecycle (Secure SDLC) practices into engineering processes.
  
• Conduct threat modeling, cybersecurity risk assessments, and vulnerability analyses for connected devices.
  
• Define cybersecurity requirements and security architecture recommendations.
  
• Coordinate static and dynamic application security testing (SAST/DAST).
  
• Coordinate and support penetration testing activities with external security experts.
  
• Support the creation and maintenance of cybersecurity risk management documentation and technical files.
  
• Collaborate with Engineering, Quality, Regulatory Affairs, and Product teams to ensure security-by-design principles are applied.
  
• Monitor security vulnerabilities and support remediation activities.
  
• Support post-market cybersecurity monitoring and vulnerability management activities.
  
• Participate in incident response planning and security investigations when required.
  
• Support the preparation of cybersecurity deliverables for regulatory submissions and audits.
  

Technical Skills - experience with cybersecurity tools and technologies such as:

Application Security & Code Analysis - experience with one or more of:

• Black Duck (or equivalent SCA tools)
  
• Fortify
  
• Checkmarx
  
• Veracode
  
• SonarQube
  

Vulnerability Management & Testing - experience with one or more of:

• Nessus
  
• OpenVAS
  
• Burp Suite
  
• OWASP ZAP
  
• Metasploit
  

Endpoint & Network Security - experience with:

• CrowdStrike, Carbon Black, or similar EDR solutions
  
• Wireshark
  
• Snort, Suricata, or similar network security technologies
  

Cloud & Infrastructure Security - exposure to:

• AWS Security Hub, Azure Security Center, or equivalent cloud security platforms
  
• Infrastructure-as-Code security tools (e.g., Checkov)
  

DevSecOps & Automation - experience with:

• Jenkins, GitLab CI/CD, or similar pipelines
  
• Security integration within CI/CD environments
  
• Docker and Kubernetes security concepts
  

Regulatory & Standards Knowledge - awareness of the following standards and frameworks is beneficial:

• ISO 14971 Risk Management
  
• IEC 62304 Medical Device Software Lifecycle Processes
  
• IEC 81001-5-1 Health Software Security
  
• FDA Premarket and Post market Cybersecurity Guidance
  
• NIST Cybersecurity Framework
  
• ISO 27001
  
• HIPAA (where applicable)
  

Preferred Qualifications:

• Experience in medical device, healthcare, IoT, embedded systems, or other regulated industries.
  
• Familiarity with FDA cybersecurity guidance and regulatory expectations.
  
• Exposure to FDA 510(k) submissions.
  
• Familiarity with IEC 81001-5-1.
  
• Knowledge of SBOM (Software Bill of Materials) practices and requirements.
  
• Experience supporting penetration testing and remediation activities.
  
• Industry certifications such as CISSP, CEH, CSSLP, or equivalent.

4400-7500 €/mon. gross

Ukmergės g. 322-1, LT-12106 Vilnius Calculate your travel time to work