Staff Cybersecurity Engineer

Stryker; Redmond; On-site; AUD 168,000 - 280,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee Stock Purchase Plan (ESPP)

Wellbeing program

Tuition assistance

Job summary

Stryker is seeking a Staff Cybersecurity Engineer to provide technical leadership across connected medical devices, cloud solutions, and software development environments. You will partner with cross-functional teams to design secure products, manage cybersecurity risk, and ensure compliance with applicable industry and regulatory requirements.

You will lead threat modeling, security assessments, architecture reviews, and risk assessments, driving remediation of identified risks.

Qualifications

• Bachelor's degree in a technical discipline required.
• 4+ years in cybersecurity, software or systems engineering.
• Experience leading complex initiatives across multiple teams.
• Expertise in two or more areas listed under qualifications.

Responsibilities

• Provide technical leadership for cybersecurity across connected devices, cloud solutions, and software development environments.
• Lead threat modeling, security assessments, and risk assessments for products; drive remediation.
• Drive DevSecOps adoption and integrate cybersecurity requirements across the lifecycle.
• Develop SBOM generation, governance, and compliance strategies across portfolios.
• Assess cybersecurity risks from third-party software and open-source components.

Skills

Product Security

Application Security

Security Architecture

DevSecOps

Software Supply Chain Security

Identity and Access Management

Threat Detection and Monitoring

Incident Response

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related technical discipline

Job description

What You Will Do:

As a Staff Cybersecurity Engineer, you will provide technical leadership for cybersecurity across connected medical devices, cloud solutions, and software development environments. You will partner with cross-functional teams to design secure products, manage cybersecurity risk, and ensure compliance with applicable industry and regulatory requirements.

• Lead the design and implementation of cybersecurity solutions across connected products, cloud platforms, and supporting systems, partnering with software and hardware architects to establish secure architecture, standards, and engineering best practices.
• Lead threat modeling, security assessments, architecture reviews, and cybersecurity risk assessments for new and existing products, driving effective remediation of identified risks and vulnerabilities.
• Drive adoption of secure software development and DevSecOps practices, integrating cybersecurity requirements throughout the product development lifecycle.
• Develop and maintain strategies for Software Bill of Materials (SBOM) generation, governance, and compliance across product portfolios.
• Assess and mitigate cybersecurity risks associated with third-party software, open-source components, and the software supply chain.
• Lead ongoing vulnerability monitoring, triage, remediation, and postmarket cybersecurity assessments, partnering with Quality and Regulatory Affairs on mitigation planning.
• Support coordinated vulnerability disclosure processes, including engagement with external security researchers and management of reported product security vulnerabilities.
• Collaborate cross-functionally with Product Security, Software Engineering, Quality, Regulatory Affairs, Privacy, Customer Support, Sales, and IT to ensure cybersecurity objectives and requirements are effectively achieved.

What You Will Do:

As a Staff Cybersecurity Engineer, you will provide technical leadership for cybersecurity across connected medical devices, cloud solutions, and software development environments. You will partner with cross-functional teams to design secure products, manage cybersecurity risk, and ensure compliance with applicable industry and regulatory requirements.

• Lead the design and implementation of cybersecurity solutions across connected products, cloud platforms, and supporting systems, partnering with software and hardware architects to establish secure architecture, standards, and engineering best practices.
• Lead threat modeling, security assessments, architecture reviews, and cybersecurity risk assessments for new and existing products, driving effective remediation of identified risks and vulnerabilities.
• Drive adoption of secure software development and DevSecOps practices, integrating cybersecurity requirements throughout the product development lifecycle.
• Develop and maintain strategies for Software Bill of Materials (SBOM) generation, governance, and compliance across product portfolios.
• Assess and mitigate cybersecurity risks associated with third-party software, open-source components, and the software supply chain.
• Lead ongoing vulnerability monitoring, triage, remediation, and postmarket cybersecurity assessments, partnering with Quality and Regulatory Affairs on mitigation planning.
• Support coordinated vulnerability disclosure processes, including engagement with external security researchers and management of reported product security vulnerabilities.
• Collaborate cross-functionally with Product Security, Software Engineering, Quality, Regulatory Affairs, Privacy, Customer Support, Sales, and IT to ensure cybersecurity objectives and requirements are effectively achieved.

What You Will Need:

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical discipline.
• 4+ years of experience in cybersecurity, software engineering, systems engineering, or a related field.
• Experience leading complex technical initiatives across multiple teams and organizations.
• Expertise in two or more of the following areas:
• Product Security
• Application Security
• Security Architecture
• DevSecOps
• Software Supply Chain Security
• Identity and Access Management
• Threat Detection and Monitoring
• Incident Response

Preferred Qualifications:

• Experience in medical devices, healthcare, or other regulated industries, including securing connected products, embedded systems, and cloud-based solutions.
• Experience with SBOM management, vulnerability management, and software supply chain security, including assessment and mitigation of third-party and open-source risks.
• Experience supporting post market cybersecurity programs and working within recognized cybersecurity and regulatory frameworks, including FDA cybersecurity guidance, IEC 62443, IEC 62304, NIST Cybersecurity Framework, and ISO 27001.
• CISSP, CCSP, CISM, GSEC, GIAC, or equivalent cybersecurity certification
• $118,000 - $196,600 USD Annual

Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance. Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.