Senior Security Engineer - Cybersecurity and Risk Management

Stryker India Private Limited; Gurugram District; Hybrid; INR 1,200,000 - 2,000,000; Full time

Job summary

Stryker India Private Limited is seeking a Senior Security Engineer (Security by Design) to lead cybersecurity risk analysis, threat modeling, and remediation for secure medical products. This role collaborates with Quality, Regulatory, and Marketing to ensure HIPAA and GDPR compliance and drives security across hardware and software platforms.

Responsibilities include system hardening, automated and manual penetration testing, vulnerability scanning for compliance, and incident response

Qualifications

• Bachelor's degree in Software Engineering/ Computer Science or related discipline.
• 4+ years of work experience in cybersecurity.
• Experience with security requirements, data security, malware analysis, vulnerability assessment, and penetration testing.

Responsibilities

• Lead cybersecurity risk analysis and threat modeling.
• Develop mitigation strategies to secure medical products.
• Collaborate with Quality, Regulatory, and Marketing to align on cybersecurity, HIPAA, and GDPR.
• Lead hardware and software security efforts, including systems hardening, penetrations testing, and vulnerability scanning.
• Develop and implement security policies and procedures for industry standards compliance.
• Integrate automated security testing into SDLC and automate routine tasks with scripting.
• Lead incident response, V&V assessments, and manage resolution of security incidents.
• Evaluate emerging security technologies and recommend adoption to improve security posture.

Skills

Threat modeling

Vulnerability assessment

Penetration testing

Security policy development

Incident response

Education

Bachelors in Software Engineering/ Computer Science

Tools

PowerShell

Python

Ruby

Job description

Senior Security Engineer (Security by Design) Work Flexibility: Hybrid

What you will do

You will lead and manage cybersecurity risk analysis and threat modeling and develop mitigation strategies to develop secure medical products. You will work closely with cross-functional teams, including Quality, Regulatory, and Marketing, in driving alignment around product Cybersecurity, HIPAA, and GDPR compliance. You will lead in all product hardware and software security facets, including systems hardening, automated and manual penetration testing, automated vulnerability scanning for compliance, and issue remediation. You will develop and implement security policies and procedures to ensure compliance with industry standards. You will integrate automated security testing into all phases of SDLC. You will automate routine tasks and extract valuable data using various scripting languages like PowerShell, Ruby, or Python. You will take a lead in incident response, V&E assessments and manage the resolution of security incidents. You will evaluate emerging security technologies and recommend their adoption to improve the organization’s security posture.

What you need:

Required Qualifications:

• Bachelor's degree in Software Engineering/ Computer Science or related discipline & 4+ years of work experience
• Experience with security requirements, data security, malware analysis, vulnerability assessment, and penetration testing using off-the-shelf tools and techniques is preferred
• Understanding one or more security standards/frameworks like NIST 800-53, IEC80001-2-8, IEC 27002, ISO 27799, IEC 15408-2, and IEC 62443-3-3
• Experience in securing medical devices or embedded devices
• Understanding quality standards like IEC 62304, IEC 60601, and 21CRF 820
• Experience with threat modeling and risk assessment
• Security certifications such as CISSP-ISSAP, CCSP, OSCP or CEH are a plus

Preferred Qualifications:

• Security certifications such as CISSP-ISSAP, CCSP, OSCP or CEH are a plus

Travel Percentage: 10%

Experience Level Senior Level