Job Details
Stryker
Senior Principal Product Security Engineer (Remote)
COVID-19 vaccination requirements
Stryker is driven to work together with our customers to make healthcare better. In order to fulfill our commitment as a federal contractor, while focusing on the health and safety of our employees and those that we serve, COVID-19 vaccines will be required for all Stryker US employees effective January 4, 2022, as well as all new US employees joining our company. Fully vaccinated persons are those who are >=14 days post-completion of the primary series of an FDA-authorized COVID-19 vaccine. If you are applying to a sales and field role which requires access to customer accounts as a function of your job, you may be required, depending on customer requirements, to obtain the COVID-19 vaccination before the January 4 effective date of Stryker's vaccine policy. For more information, please visit our COVID-19 Vaccination Requirements FAQs page.
Why join Stryker?
We are proud to be named one the World’s Best Workplaces and a Best Workplace for Diversity by Fortune Magazine! Learn more about our award-winning organization by visiting stryker.com
Our benefits include bonuses; commissions; healthcare; insurance benefits; retirement programs; stock based plans; paid time off plans; family and parenting leaves; tuition reimbursement; wellness programs; onsite fitness centers and cafeterias; discount purchase programs; and service and performance awards – not to mention various social and recreational activities.
Product Security is driven to make healthcare better by ensuring that Stryker designs, develops and maintains industry leading cyber secure products for our customers. This corporate program guides and governs the implementation and maintenance of security across the global product portfolio. The program is responsible to ensure the security, integrity, and resilience of our products to protect our customers and their patients. These efforts help Stryker to improve quality, optimize product security features that bring safe and secure life-saving solutions to the world.
The Product Security Senior Principal Engineer will report to the Head of Product Security and support Stryker global businesses. In this role you will have the capability to directly influence technical innovation and enhance security maturity of our digital health services and product information networks.
What you will do-
Monitor global regulatory changes and emerging technologies related to Digital Health Cyber Security.
Actively participate in standards working groups and reviews (i.e. AAMI, NH-ISAC, AdvaMed, ISO, etc.).
Acts as subject matter expert for Product Security.
Research, select, test, and implement new technologies and tools that will be used to advance security across the company.
Facilitate the creation of Security policies for medical devices, including post-market software management and software bill of materials.
Act as subject matter expert and consult, as necessary, with new product development (NPD) teams as the implement Product Security.
Define and own Managed Technology Blocks that will be available across the company.
Work closely with leadership and teams from all Stryker divisions to implement security controls and cloud service offerings for NPD and sustainment activities.
Coordinate and monitor vulnerability assessments and communications from all Stryker Divisions.
Advising on risk table and mitigation approaches.
Guide software technology and architecture documentation related to Product Security (Software requirements specifications, Software Architecture Diagrams, Risk mitigation traceability).
Follows established quality measures to assess overall success of team and information security program and provides reports to leadership. Recommends changes to established quality measurements as appropriate.
Encourages ongoing skill development by providing opportunities for continued education.
What you need-
Minimum Qualifications:
Bachelor's Degree in Computer Science, Information Systems, Engineering or related field is required. (An advanced degree is preferred).
10+ years of experience in product cyber security, software design, or embedded software engineering is required.
Preferred Qualifications:
Direct experience with Microsoft Cloud very strongly preferred
Strong, demonstrable security architecture experience in Azure, AWS, and hybrid environments.
Knowledge of ISO/IEC, NIST, EU MDR/MDCG standards and requirements.
Knowledge of System and Software Development Processes and Lifecycles for new product development
Experience in the use of Agile software development
Experience in the integration of security enablement in DevOps (DevSecOps)
Experience with risk management methodologies, trending, design control, threat modelling, vulnerability ranking, and product enhancements (bug fixes/ patch delivery)
Experience in developing and delivering detailed training and presentations
Demonstrated experience in developing and streamlining key aspects of quality system procedure definition to ensure compliance with applicable regulations
Experience with incident response teams and efforts, including documentation
Demonstrated knowledge of networks and network troubleshooting techniques
Demonstrated knowledge of SW Licensing and configuration management
Demonstrated knowledge of Program/Project Management
Experience in supporting compliance requirements for industry certifications (HIPAA, SOC2 Type 2, and CMMC) are preferred.
CISSP, CSSLP, CCSP or Azure Security Engineer/AWS Certified Security, CEH or LPT or other security specific certifications are preferred.
This job may be performed remotely from anywhere in the United States, except that this job may not be filled or performed in Colorado.
#DREengineering
Know someone at Stryker?
Be sure to have them submit you as a referral prior to applying for this position. Learn more about our employee referral program at https://careers.stryker.com/referrals/
About Stryker
Stryker is one of the world’s leading medical technology companies and, together with our customers, is driven to make healthcare better. We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes.
We are proud to be named one of the World’s Best Workplaces and a Best Workplace for Diversity by Fortune Magazine! Learn more about our award-winning organization by visiting stryker.com