Medical Devices Product Security Engineer

Brainlab; Waldkirch; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

30 vacation days

Flexible working hours

Team events

Fitness program

Training & education

Top 100 innovator

Job summary

Dr. Langer Medical GmbH in Waldkirch, part of Brainlab, seeks a cybersecurity expert to secure Windows-based medical devices across the product lifecycle. You will ensure compliance with IEC 81001-5-1, IEC 62304 and ISO 14971, perform threat modeling and risk assessments, and implement robust security controls.

Collaboration with R&D, QA, Regulatory Affairs and partners is essential. The role offers meaningful work in a cutting-edge medical technology company with international teams, flexible

Qualifications

• Experience in cybersecurity within regulated medical devices is required.
• Proficient knowledge of cybersecurity standards and regulatory requirements.
• Experience with threat modeling and vulnerability assessment.
• Strong Windows environments knowledge and system hardening.
• Excellent German and English communication skills.

Responsibilities

• Take responsibility for cybersecurity of Windows-based medical devices across the product lifecycle.
• Analyze and implement regulatory requirements and standards (IEC 81001-5-1, IEC 62304, ISO 14971).
• Conduct threat modeling, risk assessments, and vulnerability analyses.
• Develop and verify technical security controls and measures.
• Plan and execute security testing and support SBOM and vulnerability management.
• Prepare technical documentation for product approvals and regulatory submissions.
• Collaborate with R&D, Quality, Regulatory Affairs, and external partners.

Skills

Threat modeling

Security risk management

Vulnerability assessment

Windows security

Regulatory compliance

English/German communication

Education

Bachelor's or Master's in CS/INFOSEC/EE/Med Eng

Job description

Company Description

Dr. Langer Medical GmbH, based in Waldkirch, Germany, which has been part of Brainlab SE in Munich since 2022, has specialized in the development and marketing of highly innovative medical technology for intraoperative neuromonitoring and neurostimulation for more than 25 years. Our products are groundbreaking in design and handling and form the basis for our worldwide growth. It is therefore no coincidence that the products from Dr. Langer Medical as well as the company itself have been honored several times in the past with various prizes and awards.

Job Description

• Take responsibility for the cybersecurity of our Windows-based medical devices throughout the entire product lifecycle.
• Analyze and implement regulatory requirements and relevant standards (e.g., IEC 81001-5-1, IEC 62304, ISO 14971).
• Conduct threat modeling, risk assessments, and vulnerability analyses.
• Develop, implement, and verify technical security controls and measures.
• Plan and execute security testing activities and support SBOM and vulnerability management processes.
• Prepare technical documentation and evidence required for product approvals and regulatory submissions.
• Collaborate closely with R&D, Quality Management, Regulatory Affairs, and external partners.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Electrical Engineering, Medical Engineering, or a related field.
• Several years of experience in cybersecurity, ideally within a regulated environment or the medical device industry.
• Strong knowledge of relevant cybersecurity standards and regulatory requirements.
• Experience with threat modeling, security risk management, and vulnerability assessment.
• Solid expertise in Microsoft Windows environments (Windows 10/11, Windows IoT, or Embedded Windows).
• Experience with system hardening, network security, and security testing.
• Structured and independent working style, combined with excellent German and English communication skills.

Additional Information

• A mutually-supportive, international team
• Meaningful work with a lasting impact on medical technology
• 30 vacation days, plus December 24th and December 31st
• Flexible working hours
• Regular team, and company events
• Internal company fitness program
• Comprehensive training and continuing education opportunities offered by Brainlab
• TOP 100 innovator and employer of the future 2022

Department: R&D Software