Lead Product Security Engineer: Elekta

Manor Royal Business District; Crawley; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

A leading company in technology development seeks a Security Engineer to join their product security team. This hands-on role focuses on securing customer systems globally, ensuring that medical device data is protected throughout its lifecycle. Candidates should bring extensive experience in cybersecurity, preferably within the medical technology field. A hybrid work model is offered, along with competitive benefits including generous vacation days and a private medical insurance plan.

Benefits

Hybrid work option

Up to 25 paid vacation days

Holiday Purchase Scheme

Private Medical Insurance

Attractive Employer Pension Contribution Package

Cycle to work scheme

Life Assurance

Onsite subsidized restaurant

Electric vehicle salary sacrifice scheme

Qualifications

• 7+ years experience in cybersecurity-related roles.
• Experience with cybersecurity risk assessments in medical device standards.
• 3 years experience in software development.

Responsibilities

• Develop deliverables to meet medical device regulatory requirements.
• Implement risk assessments in alignment with regulatory guidance.
• Perform analysis of security posture independently and as part of teams.

Skills

Cybersecurity

DevSecOps

Vulnerability Assessment

Penetration Testing

Software Development

Education

Bachelor's degree in related area

Tools

Linux

Windows

Citrix

Network Operating Systems

Job description

We don’t just build technology. We build hope.

Do you wish you could make a bigger impact?

At Elekta, our product security team protects our customer systems across the globe ensuring patient data is secured and safe to achieve medical device intended use from concept to end of life.

This is a hands-on security engineer role reporting to the Chief Product Security office / Head of Product security. You will be part of the security team applying your software engineering, security analysis, penetration testing, DevOps, and requirement definition experience working in a consultative manner embedded with multiple software and hardware development teams.

Ideal candidates should be self-motivated, thrive in a fast-paced environment and always searching for a better way. The ideal candidate will have previous IT Security experience, software development, and/or DevOps build experience.

This is a hybrid work environment requiring 3 days on site based on the teams supported.

If you are creative, smart, and motivated by continual technical skill growth, we’d like to talk to you.

What you’ll do at Elekta

Your responsibilities will include (but not limited to)

You will bring technical security skills to support multiple stakeholders such as Architecture, Engineering, IT, and Testing teams to implement security capabilities.

• Develop deliverables to meet medical device regulatory requirements globally.

• Implement end to end medical device risk assessments in alignment with SW96 risk assessment.

• Perform in depth analysis of the security posture of hardware and software products independently and as part of engineering teams.

• Develop cybersecurity requirements for medical devices.

• Execution of vulnerability assessments, penetration tests and secure code scanning.

• Track vulnerabilities identified in development, testing, and post market monitoring and work resolutions and mitigations.

• Respond to cybersecurity questionnaires from customers.

• Support global teams for cybersecurity related requests.

• Serve as a cybersecurity subject matter expert for software teams and the local site.

• Analyze Security incidents to determine root cause.

• Keep up-to-date on emerging cybersecurity technologies and trends to help other employees understand the critical role of cybersecurity in the development of our products

The right stuff

• Familiarity with cybersecurity-related guidance from FDA 524B, MDR, IEC/ISO, NMPA, ISO27001, and NIST.

• Understanding of the secure development lifecycle of medical devices and software, including knowledge of secure coding techniques and good practice and OWASP.

• Experience in an FDA/MDR-regulated field (Medical Device/Pharmacy) is a plus, but not required.

• Experience in a DevSecOps role is a plus, but not required.

• Threat hunting experience is a plus.

• Security certifications from organizations such as (ISC2) and CompTIA are a plus, but not required.

What you bring

• Bachelor's degree in related area and/or equivalent experience/training.

• 7+ years of experience in cybersecurity-related job roles, preferably in product security area and IT Security.

• Experience performing cybersecurity risk assessments and analysis following medical device standards.

• 3 years of experience working with software development.

• Experience with Linux, Windows, Citrix, and Network Operating Systems required.

What you’ll get:

In this role, you will work for a higher purpose; hope for everyone dealing with cancer, andfor everyone regardless of where in the world, to have access to the best cancer care. Inaddition to this, Elekta offers a range of benefits.

• Hybrid work option (you are required to work on location at least 3 days/week)

• Up to 25 paid vacation days (plus bank holidays)

• Holiday Purchase Scheme

• Private Medical Insurance

• Attractive Employer Pension Contribution Package

• Cycle to work scheme

• Life Assurance

• Onsite subsidized restaurant, offering budget-friendly dining

• Love electric (Electric vehicle salary sacrifice scheme)

Hiring process

We are looking forward to hearing from you! Apply by submitting your application and résumé in English, via the “Apply” button. Please note that we do not accept applications by e-mail.

Your Elekta contact

For questions, please contact the Global Talent Acquisition Partner responsible, Sarah Elmasry, at [e-mail]. We do not accept applications through e-mail.

We are an equal opportunity employer

We are an equal opportunity employer. We evaluate qualified applicants without regard to age, race, colour, religion, sex, sexual orientation, gender identity, genetic information, national origin, disability, veteran status, or any other protected characteristic.