Position: Middle Security Engineer (IRC135952)
Company: GlobalLogic
Category: Security
Experience required: 2y
English level: upper

**Description:**
Inviting a Software Engineer to join a growing account in the medical devices industry domain. Our client is the global leader company of healthcare solutions, which contributes to human welfare by application of biomedical engineering in the research, design, manufacture, and sale of instruments or appliances that alleviate pain, restore health and extend life for people around the world.

**Requirements:**
Must Have: Minimum Requirements
·      Bachelors degree in a technically related field  required
·      Minimum of 2 years of relevant experience
·       Threat modeling & vulnerability assessment experience

**Nice to Have**
·      Experience as an analyst, engineer, developer, or architect with cybersecurity responsibility and knowledge in one or more of the following areas:
·   Medical devices and systems
·   Smartphone security
·   Cloud systems architecture and security
·   Mobile device application architecture and security
·   Data protection architectures for data at rest and in transit
·   Risk assessments and cybersecurity regulatory requirements 
·   STRIDE threat modeling
·    Security incident management experience 
·    OS systems-level experience with Android
·    Solid understanding of information security practices, risk management processes, and cybersecurity principles
·    Demonstrated strong analytical, problem solving skills
·    Experience in Healthcare industry or other regulated industry.
·    Awareness of national and international laws, regulations, and policies related to regulated medical device cybersecurity 

**Preferences:**
Healthcare security

**Responsibilities:**
A Day in the Life
·      Participate in mobile device product cybersecurity-related activities including vulnerability assessments and mitigation design & prototyping
·      Assist with the development and execution of intrusion detection for managed mobile devices
·      Assist with product risk assessments in conjunction with product R&D teams and develop and recommend specific security controls for mobile device.
·      Participate in the creation and testing of product security-related requirements and processes.
·      Assist in the creation of security-related deliverables for regulatory bodies, ensuring compliance with key standards / guidance documents.
·      Coordinate and evaluate 3rd party penetration test activities.
·      Maintains awareness of emerging vulnerabilities via active monitoring of US-CERT/other sources.