Staff Cybersecurity Engineer

Stryker; Redmond (WA); Hybrid; USD 118,000 - 197,000; Full time

Job summary

Stryker Corporation is seeking a Staff Cybersecurity Engineer to provide technical leadership across cybersecurity for connected medical devices, cloud solutions, and software development environments.

You will drive threat modeling, risk assessments, and the adoption of DevSecOps practices while coordinating with cross-functional teams to meet regulatory requirements and secure the product lifecycle.

Qualifications

• Bachelor's degree in CS, cybersecurity, engineering, or related field.
• 4+ years of cybersecurity or related experience.
• Experience leading complex, cross-team initiatives.

Responsibilities

• Provide technical leadership for cybersecurity across connected medical devices, cloud solutions, and software development environments.
• Lead threat modeling, security assessments, architecture reviews, and risk assessments, driving remediation.
• Drive secure SDLC and DevSecOps practices across product teams.
• Develop SBOM governance and manage third-party risk and software supply chain security.

Skills

Product Security

Application Security

Security Architecture

DevSecOps

Software Supply Chain Security

Identity and Access Management

Threat Detection and Monitoring

Incident Response

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical discipline

Job description

Work Flexibility:

Hybrid

What You Will Do:

As a Staff Cybersecurity Engineer, you will provide technical leadership for cybersecurity across connected medical devices, cloud solutions, and software development environments. You will partner with cross-functional teams to design secure products, manage cybersecurity risk, and ensure compliance with applicable industry and regulatory requirements. Lead the design and implementation of cybersecurity solutions across connected products, cloud platforms, and supporting systems, partnering with software and hardware architects to establish secure architecture, standards, and engineering best practices. Lead threat modeling, security assessments, architecture reviews, and cybersecurity risk assessments for new and existing products, driving effective remediation of identified risks and vulnerabilities. Drive adoption of secure software development and DevSecOps practices, integrating cybersecurity requirements throughout the product development lifecycle. Develop and maintain strategies for Software Bill of Materials (SBOM) generation, governance, and compliance across product portfolios. Assess and mitigate cybersecurity risks associated with third-party software, open-source components, and the software supply chain. Lead ongoing vulnerability monitoring, triage, remediation and postmarket cybersecurity assessments, partnering with Quality and Regulatory Affairs on mitigation planning. Support coordinated vulnerability disclosure processes, including engagement with external security researchers and management of reported product security vulnerabilities. Collaborate cross-functionally with Product Security, Software Engineering, Quality, Regulatory Affairs, Privacy, Customer Support, Sales, and IT to ensure cybersecurity objectives and requirements are effectively achieved.

Expertise in two or more of the following areas:

• Product Security
• Application Security
• Security Architecture
• DevSecOps
• Software Supply Chain Security
• Identity and Access Management
• Threat Detection and Monitoring
• Incident Response

What You Will Need:

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical discipline.
• 4+ years of experience in cybersecurity, software engineering, systems engineering, or a related field.
• Experience leading complex technical initiatives across multiple teams and organizations.

Preferred Qualifications:

• Experience in medical devices, healthcare, or other regulated industries, including securing connected products, embedded systems, and cloud-based solutions.
• Experience with SBOM management, vulnerability management, and software supply chain security, including assessment and mitigation of third-party and open-source risks.
• Experience supporting post market cybersecurity programs and working within recognized cybersecurity and regulatory frameworks, including FDA cybersecurity guidance, IEC 62443, IEC 62304, NIST Cybersecurity Framework, and ISO 27001.
• CISSP, CCSP, CISM, GSEC, GIAC, or equivalent cybersecurity certification.

$118,000 - $196,600 USD

Annual Travel Percentage: 10%

Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer - M/F/Veteran/Disability. Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

Stryker is one of the world’s leading medical technology companies and, together with its customers, is driven to make healthcare better. We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes. We are proud to be named one of the World’s Best Workplaces! For more information, visit: www.stryker.com

Work Flexibility Remote - Role allows you to work the majority to 100% of time from an alternate workplace. These roles could have travel expectations, and you must work within the country of the job requisition location. Field-based - You can expect to regularly work a majority to 100% of time at customer facilities and has a set territory or expectation to travel within a set boundary. Almost all sales roles would likely be qualified as field-based. Onsite - Role is 100% located at a Stryker facility. Some ad hoc flexibility may be available depending on role, level, and job requirements. Manufacturing roles and any role that requires physical presence at the office would qualify under this category. Hybrid - You can expect to regularly work in both an alternate workplace and a Stryker facility. Roles that are partially remote or co-located would qualify as hybrid, and the expectation to be onsite would be defined and agreed upon by your manager/supervisor.