Senior Information Security Expert IRC305691

GlobalLogic; Kraków; On-site; PLN 352,000 - 509,000; Full time

Job summary

GlobalLogic, a leading digital engineering partner, seeks a cybersecurity specialist to own SSDF activities for a medical device software project. You will work with development and architecture teams across the full software life cycle to ensure secure design and regulatory alignment.

The role emphasizes secure IoT architecture, encryption, authentication, and secure communications, with regular stakeholder reporting and guidance across multiple teams.

Qualifications

• Knowledge of secure architecture and secure design (Zero Trust).
• Strong knowledge of cybersecurity processes – SSDF by NIST.
• Cross-team collaboration.
• Strong understanding of SAST tools management; Veracode experience is a plus.
• Vulnerabilities evaluation and management.
• Secure IoT architecture design best practices (Zero Trust, firmware security).
• Data encryption.
• Data anonymization.
• Secure communication (HTTPS – TLS/mTLS, PKI).
• Identity and Access Management.
• Scripting experience (Bash, Python, PowerShell).
• Knowledge of FDA requirements.
• NHI and medical devices security.

Responsibilities

• Owning and maintaining security activities required by SSDF process.
• Reporting to stakeholders.
• Collaboration with Development and architects team.
• Cybersecurity documentation management.
• Solution design and security requirements creation.
• Supporting/advising development team in security challenges.

Skills

Secure architecture

Secure design

SSDF by NIST

Cross-team collaboration

SAST tools management

Veracode experience

Vulnerability management

Secure IoT security

Data encryption

Data anonymization

Secure communication

Identity and Access Management

Scripting (Bash, Python, PS)

FDA requirements

Medical device security

Tools

Veracode

Job description

Description
Our client is innovative manufacturer of medical devices in the United States which produces a devices and software applications. At this project, you will have a great opportunity to be involved into the full development life cycle of medical software which is intended to help individuals by processing certain information taken from medical devices to identify health trends and to track daily activities.
Description
Our client is innovative manufacturer of medical devices in the United States which produces a devices and software applications. At this project, you will have a great opportunity to be involved into the full development life cycle of medical software which is intended to help individuals by processing certain information taken from medical devices to identify health trends and to track daily activities.
Requirements
– Knowledge of secure architecture & secure design (e.g. Zero Trust)
– Strong knowledge of cybersecurity processes – SSDF by NIST
– Cross-team collaboration
– Strong understanding of SAST tools management. Veracode experience will be an advantage.
– Vulnerabilities evaluation and management
– Secure IoT architecture design best practices (e.g. Zero Trust, firmware security)
Strong knowledge of secure design in healthcare solutions:

• Data encryption
• Data anonymization
• Secure communication (HTTPS – TLS/ mTLS, PKI)
• Identity and Access Management
  

– Scripting experience (e.g. Bash, Python, PS)
– Strong knowledge of the latest FDA requirements
– NHI and medical devices security
Job responsibilities

• Owning and maintaining security activities required by SSDF process
• Reporting to stakeholders
• Collaboration with Development and architects team
• Cybersecurity documentation management
• Solution design and security requirements creation
• Supporting/advising development team in security challenges
  

What we offer
Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people’s lives.
Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.
DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.
Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.
Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.
Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.
About GlobalLogicGlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.