Cybersecurity Intern: Connected Medical Devices & Risk

InternHunt; Burgdorf; Remote; CHF 20,000 - 29,000; Full time

Job summary

InternHunt is seeking a Cybersecurity Intern for the Connected Medical Devices program in Switzerland. You will gain hands-on experience in cybersecurity risk management for medical devices and their software ecosystems, mapping trust boundaries across components and interfaces while aligning with regulatory considerations.

You will help transition risk assessments from CVSS 3.1 to 4.0, analyse architectures and dependencies, and support mitigations alongside system and verification engineers.

Qualifications

• Experience or study in cybersecurity risk management for connected devices.
• Familiarity with STRIDE threat modelling and risk assessment.
• Interest in SBOM, SOUP and third-party components.

Responsibilities

• Support cybersecurity risk management activities for connected medical devices and software ecosystems.
• Assist with transitioning from CVSS 3.1 to CVSS 4.0.
• Analyze system architectures, trust boundaries and security dependencies.
• Apply STRIDE to identify threats and vulnerabilities.
• Review software components and security implications including SBOM and SOUP.
• Contribute to procedures for cybersecurity during product development and post-market surveillance.
• Collaborate with engineers to define mitigations.
• Explore AI-assisted threat monitoring and automation using Python.

Skills

Threat modelling

Python

APIs

Automation

Analytical thinking

Communication

Education

Computer Science / Cybersecurity / Systems Engineering or related

Tools

Python

Job description

InternHunt is seeking a Cybersecurity Intern for the Connected Medical Devices program in Switzerland. You will gain hands-on experience in cybersecurity risk management for medical devices and their software ecosystems, mapping trust boundaries across components and interfaces while aligning with regulatory considerations.

You will help transition risk assessments from CVSS 3.1 to 4.0, analyse architectures and dependencies, and support mitigations alongside system and verification engineers.