Cybersecurity Intern - Connected Medical Devices | 80-100% Fixed-Term Role – 6 Months

InternHunt; Burgdorf; À distance; CHF 20 000 - 29 000; Plein temps

Résumé du poste

InternHunt is seeking a Cybersecurity Intern for the Connected Medical Devices program in Switzerland. You will gain hands-on experience in cybersecurity risk management for medical devices and their software ecosystems, mapping trust boundaries across components and interfaces while aligning with regulatory considerations.

You will help transition risk assessments from CVSS 3.1 to 4.0, analyse architectures and dependencies, and support mitigations alongside system and verification engineers.

Qualifications

• Experience or study in cybersecurity risk management for connected devices.
• Familiarity with STRIDE threat modelling and risk assessment.
• Interest in SBOM, SOUP and third-party components.

Responsabilités

• Support cybersecurity risk management activities for connected medical devices and software ecosystems.
• Assist with transitioning from CVSS 3.1 to CVSS 4.0.
• Analyze system architectures, trust boundaries and security dependencies.
• Apply STRIDE to identify threats and vulnerabilities.
• Review software components and security implications including SBOM and SOUP.
• Contribute to procedures for cybersecurity during product development and post-market surveillance.
• Collaborate with engineers to define mitigations.
• Explore AI-assisted threat monitoring and automation using Python.

Connaissances

Threat modelling

Python

APIs

Automation

Analytical thinking

Communication

Formation

Computer Science / Cybersecurity / Systems Engineering or related

Outils

Python

Description du poste

Cybersecurity Intern - Connected Medical Devices | 80-100% Fixed-Term Role - 6 Months

2026-10-06

Role Description

In an Automated Insulin Delivery (AID) system, cybersecurity is not only about protecting data. A cyber incident can directly become a patient safety issue.

As a Cybersecurity Intern, you will gain hands-on experience in cybersecurity risk management for connected medical devices and see how regulatory requirements, including those of the FDA, influence real engineering decisions. You will contribute to our transition from CVSS 3.1 to CVSS 4.0, helping us strengthen the way we analyse and manage security risks throughout the product lifecycle.

You will work within a complex system-of-systems involving a wearable insulin pump, continuous glucose monitoring sensors, mobile applications and cloud platforms. Your work will include mapping trust boundaries and security dependencies across Bluetooth and Wi-Fi interfaces, as well as supporting the identification and assessment of cybersecurity risks.

• Support cybersecurity risk management activities for connected medical devices and their software ecosystems
• Contribute to the transition from CVSS 3.1 to CVSS 4.0 and help define practical assessment approaches
• Analyse system architectures, trust boundaries and security dependencies across pump, sensor, mobile app and cloud environments
• Apply STRIDE threat-modelling methods to identify potential threats and vulnerabilities
• Assess software components and their security implications, including SBOMs, SOUP and open-source or off-the-shelf libraries
• Support the development of company procedures for cybersecurity during pre-market development and post-market surveillance
• Help translate technical cybersecurity risks into potential patient safety risks
• Collaborate with system engineers, software engineers and verification engineers to define and demonstrate appropriate mitigations
• Explore how Agentic AI could support post-market surveillance by scanning external threat databases, vulnerability disclosures and industry information
• Use Python and APIs to support automation, data analysis and experimentation with AI-supported Workflows

Your Profile

• Currently studying or recently graduated in Computer Science, Cybersecurity, Systems Engineering, Biomedical Engineering or a related discipline
• Strong curiosity about connected medical devices and system-of-systems architectures
• Interest in threat modelling, particularly STRIDE
• Interest in software security supply chains, SBOM, SOUP and third-party components
• Interest in vulnerability scoring systems such as CVSS
• Analytical and structured approach to complex technical problems
• Ability to communicate clearly and collaborate with colleagues from different engineering disciplines
• Hands-on familiarity with Python, APIs or automation is an advantage
• Interest in applying Agentic AI to practical cybersecurity and engineering challenges
• Very good command of English; German is an advantage