1 day ago
Base Salary
$118k - $197k/yr
Responsibilities
- Lead cybersecurity solution design and implementation across connected products, cloud platforms, and supporting systems.
- Establish secure architecture, cybersecurity standards, and engineering best practices with software and hardware architects.
- Lead threat modeling, security assessments, architecture reviews, cybersecurity risk assessments, and remediation activities.
- Drive secure software development and DevSecOps practices throughout the product development lifecycle.
- Develop and maintain Software Bill of Materials generation, governance, and compliance strategies.
- Assess and mitigate risks from third-party software, open-source components, and the software supply chain.
- Lead vulnerability monitoring, triage, remediation, and postmarket cybersecurity assessments.
- Support coordinated vulnerability disclosure, including engagement with external security researchers and management of reported product vulnerabilities.
- Collaborate with cross-functional Product Security, Software Engineering, Quality, Regulatory Affairs, Privacy, Customer Support, Sales, and IT teams.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical discipline.
- At least 4 years of experience in cybersecurity, software engineering, systems engineering, or a related field.
- Experience leading complex technical initiatives across multiple teams and organizations.
- Expertise in at least two of Product Security, Application Security, Security Architecture, DevSecOps, Software Supply Chain Security, Identity and Access Management, Threat Detection and Monitoring, or Incident Response.
- Preferred experience in medical devices, healthcare, regulated industries, connected products, embedded systems, and cloud-based solutions.
- Preferred experience with SBOM management, vulnerability management, software supply chain security, and third-party or open-source risk mitigation.
- Preferred experience with postmarket cybersecurity programs and FDA cybersecurity guidance, IEC 62443, IEC 62304, the NIST Cybersecurity Framework, and ISO 27001.
- Preferred CISSP, CCSP, CISM, GSEC, GIAC, or equivalent cybersecurity certification.
Benefits
- Hybrid work flexibility.
- 10% travel required.
- Equal opportunity employment and legally protected pay-discussion rights are stated.
Categories
About Stryker
Stryker designs and manufactures medical devices and equipment for hospitals and surgeons, spanning orthopaedic implants, trauma and spine hardware, surgical tools, endoscopy, navigation, and patient care equipment. The NYSE-listed company, founded in 1941 and headquartered in Kalamazoo, Michigan, sells products and related services worldwide to health systems and ambulatory centers. It reported $22.6 billion in 2024 sales and markets its portfolio across roughly 75 countries.