Medical Device Cybersecurity Engineer

Biobot Surgical Pte Ltd; Singapore; On-site; SGD 100,000 - 150,000; Full time

Job summary

Biobot Surgical is seeking a Medical Device Cybersecurity Engineer to strengthen cybersecurity compliance across its product lifecycle. You will work with Engineering, Quality, Regulatory and Service teams to define cybersecurity requirements, perform risk assessments, manage SBOMs and coordinate regulatory submissions.

You will implement secure-by-design controls, support V&V, conduct vulnerability testing, and assist integration into hospital IT environments. This role is based in Singapore.

Qualifications

• Bachelor’s degree or above in cybersecurity, computer science, software engineering, or a related discipline.
• 3+ years of cybersecurity or secure software development experience.
• Experience with medical devices, healthcare technology, or healthcare IT systems.
• Practical experience in threat modelling, security risk assessment, vulnerability assessment, penetration testing, network security and secure software development.
• Able to translate cybersecurity risks and technical findings into practical engineering controls, risk-management evidence and regulatory documentation.
• Knowledge of SBOM, software supply-chain security, CVE/CWE/CVSS, third-party/open-source software management and vulnerability remediation.
• Familiarity with TCP/IP, TLS, REST APIs, Windows security and client-server architectures.
• Familiarity with FDA cybersecurity requirements/Section 524B, IEC 81001-5-1, AAMITIR57/TIR97, ISO 14971 and IEC 62304.

Responsibilities

• Perform threat modelling and risk assessment for medical device systems, workstations, software, network interfaces and connected components.
• Define and implement secure-by-design requirements and controls, including authentication, access control, secure communication, logging, software updates, data protection.
• Plan and support cybersecurity V&V, including vulnerability scanning, penetration testing, software/component analysis and security regression testing.
• Manage SBOMs, third-party/open-source software and vulnerabilities, including CVE monitoring, impact assessment, remediation and patch management.
• Support secure integration/deployment with hospital IT infrastructure, PACS/RIS/HIS, network storage and other connected systems.
• Prepare cybersecurity documentation and evidence for regulatory submissions and QMS/design-control activities.
• Support post-market cybersecurity activities, including vulnerability monitoring, disclosure, incident assessment and security updates.

Skills

Threat modelling

Risk assessment

Vulnerability assessment

Penetration testing

Secure software dev

SBOM management

OSS management

CVE/CWE/CVSS

Supply-chain security

TCP/IP security

TLS security

Windows security

Regulatory docs

Education

Bachelor's degree or above in cybersecurity, computer science, software engineering, or a related discipline

Job description

About the role

Biobot Surgical is seeking a Medical Device Cybersecurity Engineer to strengthen the cybersecurity compliance and inter-connectivity of its product family throughout the total product lifecycle. The successful candidate will work closely with Engineering, Quality, Regulatory and Service teams to establish cybersecurity requirements, perform risk assessment and verification, manage software vulnerabilities and SBOMs, support regulatory submissions, and ensure the secure deployment of Biobot products within hospital IT environments.

Key responsibilities:

• Perform cybersecurity threat modelling and risk assessment for medical device systems, workstations, software, network interfaces and connected components.

• Define and implement secure-by-design requirements and controls, including authentication, access control, secure communication, logging, software updates, data protection, etc.

• Plan and support cybersecurity V&V, including vulnerability scanning, penetration testing, software/component analysis and security regression testing.

• Manage SBOMs, third-party/open-source software and vulnerabilities, including CVE monitoring, impact assessment, remediation and patch management.

• Support secure integration/deployment with hospital IT infrastructure, PACS/RIS/HIS, network storage and other connected systems.

• Prepare cybersecurity documentation and evidence for regulatory submissions and QMS/design-control activities.

• Support post-market cybersecurity activities, including vulnerability monitoring, disclosure, incident assessment and security updates.

Requirements:

• Bachelor's degree or above in cybersecurity, computer science, software engineering, or a related discipline.

• 3+ years of cybersecurity or secure software development experience.

• Experience with medical devices, healthcare technology, or healthcare IT systems.

• Practical experience in threat modelling, security risk assessment, vulnerability assessment, penetration testing, network security and secure software development.

• Able to translate cybersecurity risks and technical findings into practical engineering controls, risk-management evidence and regulatory documentation.

• Knowledge of SBOM, software supply-chain security, CVE/CWE/CVSS, third-party/open-source software management and vulnerability remediation.

• Familiarity with TCP/IP, TLS, REST APIs, Windows security and client-server architectures.

• Familiarity with FDA cybersecurity requirements/Section 524B, IEC 81001-5-1, AAMITIR57/TIR97, ISO 14971 and IEC 62304.