Job
- Level
- Senior
- Location
- Tuttlingen
- Working Model
- Onsite
- Job Field
- IT, Embedded, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you implement and document secure software for active medical devices, conduct code reviews, and support product teams in the execution of security requirements.
Job Technologies
Your role in the team
- They implement and document secure software for active medical devices and implement security-related functionalities such as authentication, encryption, secure logging, and key management.
- They assess the technical feasibility of security requirements and work with the product teams to specify them.
- You define and maintain secure coding guidelines and support their implementation in everyday development.
- They conduct code reviews and support the specification as well as the execution of requirements and threat mitigation tests.
- They analyze findings from security and penetration tests and jointly derive appropriate technical measures with the involved teams.
- The technical implementation of security patches and mitigations for new and existing products, as well as support in the assessment and handling of vulnerabilities, are also part of your responsibilities.
- They participate in incident response activities as well as in measures related to end of life and end of service for products.
- They support threat modeling, the assessment and implementation of risk control measures, as well as the consideration of interfaces between safety and security from an implementation perspective.
- You advise the product teams on secure software implementation and integrate global product security SOPs into the development processes.
This text has been machine translated. Show original
Our expectations of you
Education
- You have a completed degree in Computer Science, Technical Informatics, Electrical Engineering, or a comparable field (Bachelor, Diploma, or equivalent) or several years of professional experience in a role relevant to the position.
Qualifications
- You have good knowledge of the complete software lifecycle, from specification through implementation and verification to maintenance of software in a regulated environment.
- You are familiar with the requirements for software development according to IEC 62304 and IEC 81001-5-1; knowledge of other relevant standards and regulatory requirements for medical devices is advantageous. Knowledge of CRA is also beneficial.
- Ideally, you have knowledge of Threat Modeling, Security Risk Management, SBOMs, and modern key management procedures.
- You are proficient in German and English, both spoken and written.
Experience
- You have more than five years of professional experience in software development, preferably in the development of embedded systems or active medical devices.
- You have extensive experience in Secure Coding and implementing security-related functionalities, particularly in the areas of cryptography, authentication, encryption, key management, and secure logging.
- You have experience with development tools such as git, solid knowledge of working with and on Linux-based systems, bare-metal systems, and experience with programming languages C/C++ and Python.
- You have experience with code reviews, implementing security requirements, as well as the technical assessment and remediation of vulnerabilities.
This text has been machine translated. Show original
What we offer
- Attractive and fair compensation based on the ERA collective agreement "Metal and Electrical Industry Baden-Württemberg".
- Company pension scheme.
- In-house company restaurant with a diverse and balanced menu.
- Company health insurance fund with a wide range of services.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
Aesculap AG
Aesculap AG, as part of the B. Braun Group, is a significant player in medical technology with a wide range of surgical products. The company employs around 3,600 people and is headquartered in Tuttlingen.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Healthcare, Social Sector
Product Security Implementation Engineer
- Location
- Tuttlingen
- Working Model
- Onsite
- Diversity
- Open for all genders
