Cybersecurity Intern - Connected Medical Devices | 80-100% Fixed-Term Role – 6 Months

mylife Diabetes Care; Burgdorf; On-site; CHF 22,000 - 33,000; Full time

Job summary

mylife Diabetes Care seeks a Cybersecurity Intern to gain hands-on experience in risk management for connected medical devices. You will work on regulatory influences, including FDA considerations, and help transition from CVSS 3.1 to CVSS 4.0 across a complex system of devices, apps, and cloud services.

You will map trust boundaries, assess dependencies, and support mitigation development while collaborating with system and software engineers. Strong English is required; German is a plus.

Qualifications

• Looking for students or recent graduates in CS, cybersecurity, systems engineering, biomedical engineering or related fields.
• Interest in connected medical devices and system-of-systems architectures.
• Familiarity with STRIDE threat modelling and CVSS concepts.
• Interest in software security supply chains and third‑party components.

Responsibilities

• Support cybersecurity risk management for connected medical devices and software ecosystems.
• Contribute to CVSS 4.0 transition and practical assessment methods.
• Analyse architectures, trust boundaries and security dependencies across devices, apps and cloud.
• Help translate cybersecurity risks into patient safety considerations.
• Collaborate with engineers to define mitigations and learn from regulatory requirements.

Skills

STRIDE threat modelling

Python

APIs

Cybersecurity risk management

SBOM/SOUP awareness

CVSS knowledge

Clear communication

Education

Bachelor’s or Master in CS/Cybersecurity/BME

Tools

SBOM tools

Threat modelling tools

Job description

In an Automated Insulin Delivery (AID) system, cybersecurity is not only about protecting data. A cyber incident can directly become a patient safety issue.

As a Cybersecurity Intern, you will gain hands-on experience in cybersecurity risk management for connected medical devices and see how regulatory requirements, including those of the FDA, influence real engineering decisions. You will contribute to our transition from CVSS 3.1 to CVSS 4.0, helping us strengthen the way we analyse and manage security risks throughout the product lifecycle.

You will work within a complex system-of-systems involving a wearable insulin pump, continuous glucose monitoring sensors, mobile applications and cloud platforms. Your work will include mapping trust boundaries and security dependencies across Bluetooth and Wi‑Fi interfaces, as well as supporting the identification and assessment of cybersecurity risks.

• Support cybersecurity risk management activities for connected medical devices and their software ecosystems
• Contribute to the transition from CVSS 3.1 to CVSS 4.0 and help define practical assessment approaches
• Analyse system architectures, trust boundaries and security dependencies across pump, sensor, mobile app and cloud environments
• Apply STRIDE threat‑modelling methods to identify potential threats and vulnerabilities
• Assess software components and their security implications, including SBOMs, SOUP and open‑source or off‑the‑shelf libraries
• Support the development of company procedures for cybersecurity during pre‑market development and post‑market surveillance
• Help translate technical cybersecurity risks into potential patient safety risks
• Collaborate with system engineers, software engineers and verification engineers to define and demonstrate appropriate mitigations
• Explore how Agentic AI could support post‑market surveillance by scanning external threat databases, vulnerability disclosures and industry information
• Use Python and APIs to support automation, data analysis and experimentation with AI‑supported Workflows

Your Profile

• Currently studying or recently graduated in Computer Science, Cybersecurity, Systems Engineering, Biomedical Engineering or a related discipline
• Strong curiosity about connected medical devices and system‑of‑systems architectures
• Interest in threat modelling, particularly STRIDE
• Interest in software security supply chains, SBOM, SOUP and third‑party components
• Interest in vulnerability scoring systems such as CVSS
• Analytical and structured approach to complex technical problems
• Ability to communicate clearly and collaborate with colleagues from different engineering disciplines
• Hands‑on familiarity with Python, APIs or automation is an advantage
• Interest in applying Agentic AI to practical cybersecurity and engineering challenges
• Very good command of English; German is an advantage