Cybersecurity Engineer II

Overview

In this role you join the Cybersecurity team to secure STERIS/ Cantel medical software and hardware, focusing on vulnerability management and secure design. You will collaborate with product teams to embed security, perform assessments, and support regulatory deliverables to safeguard critical healthcare technology. You drive improvements in security testing practices and contribute to incident response. This position offers the chance to impact patient safety and healthcare outcomes through robust security controls.

Responsabilità

• Analyze CVEs and assess applicability to product lines; collaborate with product teams for impact assessments
• Develop and track SBOMs, monitor vulnerabilities, and coordinate remediation with product teams
• Identify software security vulnerabilities and assist with remediation planning
• Support product security risk assessments, requirements analysis, and test methods
• Plan and execute product security testing, including test cases and procedures
• Conduct vulnerability assessment and network scanning; perform internal fuzz testing
• Reproduce and communicate penetration testing findings to guide remediation
• Implement security controls in embedded software and related applications
• Research new security testing techniques to enhance device security
• Participate in cybersecurity improvement projects and regulatory deliverables (FDA 510(k))
• Respond to customer cybersecurity questionnaires and produce FAQs/White Papers

Requisiti fondamentali

• Bachelor's degree in computer engineering, Software Engineering, or Cybersecurity
• ≥3 years in cybersecurity with risk assessments and security testing
• ≥1 year in vulnerability assessment and SDLC
• Proficiency in Python, C/C++/C#, Java
• Experience evaluating penetration test results and recommending fixes
• English proficiency at B2
• desirable: vulnerability scanning tools, threat modeling, penetration testing
• desirable: SSCP/CISSP, Windows/Linux OS knowledge
• desirable: writing security requirements
• Team player across multi-location teams
• Strong communication and problem-solving
• Keen interest in security standards and best practices
• Python
• C/C++/C#
• Java