Product Security Implementation Engineer (w/m/d)
B. Braun Group2 months ago
Tuttlingen, GermanySenior
Responsibilities
- Implement and document secure software for active medical devices.
- Implement authentication, encryption, secure logging, and key-management functionality.
- Evaluate the technical feasibility of security requirements and refine them with product teams.
- Define and maintain secure-coding guidelines and support their adoption in daily development.
- Conduct code reviews and support requirements and threat-mitigation testing.
- Analyze security and penetration-test findings and coordinate technical remediation measures.
- Implement security patches and mitigations for new and existing products and support vulnerability assessment and treatment.
- Contribute to incident-response activities and product end-of-life and end-of-service measures.
- Support threat modeling, security risk controls, and the implementation-focused analysis of safety and security interfaces.
- Advise product teams on secure software implementation and integrate global product-security SOPs into development processes.
Requirements
- Completed degree in computer science, technical computer science, electrical engineering, or a comparable field at bachelor, diploma, or equivalent level, or several years of relevant professional experience.
- More than five years of professional software-development experience, preferably in embedded systems or active medical devices.
- Strong experience with secure coding and implementing cryptography, authentication, encryption, key management, and secure logging.
- Experience with Git, Linux-based systems, bare-metal systems, C/C++, and Python.
- Knowledge of the complete software lifecycle from specification and implementation through verification and maintenance in a regulated environment.
- Knowledge of IEC 62304 and IEC 81001-5-1; knowledge of additional medical-device standards and regulatory requirements is advantageous.
- Experience with code reviews, security requirements, and the technical assessment and remediation of vulnerabilities.
- Ideally, knowledge of threat modeling, security risk management, SBOMs, and modern key-management methods.
- Fluent written and spoken German and English.
- Ability to work hands-on and independently while collaborating across software, electronics, product security, quality, regulatory, and product teams.
Benefits
- Attractive and fair compensation under the ERA collective agreement for the Baden-Württemberg metal and electrical industry.
- Occupational pension scheme.
- Company restaurant with a varied and balanced food selection.
- Company health insurance fund with a broad range of services.
- Job sharing is possible.
- The employer encourages applications from people of all identities, life situations, and backgrounds.