Senior InfoSec Architect – Healthcare IoT & SSDF

GlobalLogic; Kraków; On-site; PLN 352,000 - 509,000; Full time

Job summary

GlobalLogic, a leading digital engineering partner, seeks a cybersecurity specialist to own SSDF activities for a medical device software project. You will work with development and architecture teams across the full software life cycle to ensure secure design and regulatory alignment.

The role emphasizes secure IoT architecture, encryption, authentication, and secure communications, with regular stakeholder reporting and guidance across multiple teams.

Qualifications

• Knowledge of secure architecture and secure design (Zero Trust).
• Strong knowledge of cybersecurity processes – SSDF by NIST.
• Cross-team collaboration.
• Strong understanding of SAST tools management; Veracode experience is a plus.
• Vulnerabilities evaluation and management.
• Secure IoT architecture design best practices (Zero Trust, firmware security).
• Data encryption.
• Data anonymization.
• Secure communication (HTTPS – TLS/mTLS, PKI).
• Identity and Access Management.
• Scripting experience (Bash, Python, PowerShell).
• Knowledge of FDA requirements.
• NHI and medical devices security.

Responsibilities

• Owning and maintaining security activities required by SSDF process.
• Reporting to stakeholders.
• Collaboration with Development and architects team.
• Cybersecurity documentation management.
• Solution design and security requirements creation.
• Supporting/advising development team in security challenges.

Skills

Secure architecture

Secure design

SSDF by NIST

Cross-team collaboration

SAST tools management

Veracode experience

Vulnerability management

Secure IoT security

Data encryption

Data anonymization

Secure communication

Identity and Access Management

Scripting (Bash, Python, PS)

FDA requirements

Medical device security

Tools

Veracode

Job description

GlobalLogic, a leading digital engineering partner, seeks a cybersecurity specialist to own SSDF activities for a medical device software project. You will work with development and architecture teams across the full software life cycle to ensure secure design and regulatory alignment.

The role emphasizes secure IoT architecture, encryption, authentication, and secure communications, with regular stakeholder reporting and guidance across multiple teams.