Cybersecurity Engineer

Project

We are seeking a Cybersecurity Engineer to support thedevelopment and lifecycle management of a Secure Connectivity Board (SCB)product.

This role will drive cybersecurity activities throughout the product lifecycle, ensuring security-by-design principles are embedded into product development and supporting compliance with applicable medical device cybersecurity requirements.

Work

The successful candidate will work closely with Engineering, Quality, Regulatory Affairs, and external security experts to ensure cybersecurity risks are properly identified, assessed, mitigated, and documented.

Key Responsibilities

Design, implement, and maintain cybersecurity controls throughout the product lifecycle (design, development, deployment, and post-market activities). Integrate Secure Software Development Lifecycle (Secure SDLC) practices into engineering processes. Conduct threat modeling, cybersecurity risk assessments, and vulnerability analyses for connected devices. Define cybersecurity requirements and security architecture recommendations. Coordinate static and dynamic application security testing (SAST/DAST). Coordinate and support penetration testing activities with external security experts. Support the creation and maintenance of cybersecurity risk management documentation and technical files. Collaborate with Engineering, Quality, Regulatory Affairs, and Product teams to ensure security-by-design principles are applied. Monitor security vulnerabilities and support remediation activities. Support post-market cybersecurity monitoring and vulnerability management activities. Participate in incident response planning and security investigations when required. Support the preparation of cybersecurity deliverables for regulatory submissions and audits.

Technical Skills - experience with cybersecurity tools and technologies such as:

Application Security & Code Analysis - experience with one or more of: Black Duck (or equivalent SCA tools) Fortify Checkmarx Veracode SonarQube

Vulnerability Management & Testing - experience with one or more of: Nessus OpenVAS Burp Suite OWASP ZAP Metasploit

Endpoint & Network Security - experience with: CrowdStrike, Carbon Black, or similar EDR solutions Wireshark Snort, Suricata, or similar network security technologies

Cloud & Infrastructure Security - exposure to: AWS Security Hub, Azure Security Center, or equivalent cloud security platforms Infrastructure-as-Code security tools (e.g., Checkov)

DevSecOps & Automation - experience with: Jenkins, GitLab CI/CD, or similar pipelines Security integration within CI/CD environments Docker and Kubernetes security concepts

Regulatory & Standards Knowledge - awareness of the following standards and frameworks is beneficial: ISO 14971 Risk Management IEC 62304 Medical Device Software Lifecycle Processes IEC 81001-5-1 Health Software Security FDA Premarket and Post market Cybersecurity Guidance NIST Cybersecurity Framework ISO 27001 HIPAA (where applicable)

Preferred Qualifications: Experience in medical device, healthcare, IoT, embedded systems, or other regulated industries. Familiarity with FDA cybersecurity guidance and regulatory expectations. Exposure to FDA 510(k) submissions. Familiarity with IEC 81001-5-1. Knowledge of SBOM (Software Bill of Materials) practices and requirements. Experience supporting penetration testing and remediation activities. Industry certifications such as CISSP, CEH, CSSLP, or equivalent.

Our Offer

Support – You will have a Qdev buddy by your side Flexibility – flexible working hours, vacation schedule Online and offline training/workshops and other knowledge-sharing possibilities Additional health and personal accident insurance Snacks and fun activities in the office Additional time off Personal and sport budget Loyalty benefits and perks Agile, friendly and international environment Gross salary in a range of 4400-7500 EUR (negotiable, based on competencies)

Data Protection

By applying I confirm that I have read and understood Qdev Technologies Privacy Policy and Candidate Privacy Notice ( www.qdevtechnologies.com/privacy-policy ). By submitting this application, I agree for Qdev Technologies to store my personal data for up to 5 years in order to contact me about future opportunities. Consent can be withdrawn at any time by contacting us.

Salary

4400-7500 €/mon. gross

Work place

Ukmergės g. 322-1, LT-12106 Vilnius Calculate your travel time to work

<section