Cybersecurity Expert - Product (Medical Devices) (f​/m​/d

Cybersecurity Expert - Product (Medical Devices) (f/m/d)

514811

29-Jul-2026

Siemens Healthineers

Cybersecurity

Siemens Healthineers AG

• Forchheim - - Alemania

Do you want to help create the future of healthcare? Our name, Siemens Healthineers, was selected to honor our people who dedicate their energy and passion to this cause. It reflects their pioneering spirit combined with our long history of engineering in the ever-evolving healthcare industry.

We offer you a flexible and dynamic environment with opportunities to go beyond your comfort zone in order to grow personally and professionally. Sounds interesting?

Then come and join our global team as Cybersecurity Expert (f/m/d) Product (Medical Devices). In this position, you will help strengthen the cybersecurity posture of advanced medical devices used in demanding clinical environments. You will work at the intersection of cybersecurity, medical device development, systems engineering, product architecture, regulatory compliance, and healthcare innovation.

Choose the best place for your work – Within the scope of this position, it is possible, in consultation with your manager, to work mobile (within Germany) up to an average volume of 60% of the respective working hours.

Even more flexibility? Mobile working from abroad is possible for up to 30 days a year under certain conditions and in selected countries.

You are part of the cybersecurity team supporting the Artis product family. Together with an experienced internal Cybersecurity Expert and external cybersecurity specialists, you ensure the planning, execution, and continuous improvement of cybersecurity activities throughout the product lifecycle.

Together with Product Management, Systems Engineering, Architecture, and the Cybersecurity Officer, you contribute to cybersecurity strategies and planning activities for new product developments and product maintenance projects.

You create threat models, perform Threat and Risk Analyses (TRA), moderate cybersecurity workshops and derive risk mitigation measures using established methodologies and industry best practices.

You define, specify, and maintain cybersecurity requirements and ensure their traceability from risk identification through implementation and verification.

You develop and review cybersecurity architectures, data flow diagrams, network flow diagrams, and other security engineering artifacts for complex medical systems in cooperation with architects.

You provide technical guidance to development teams regarding secure software development, system hardening and security-by-design principles.

You coordinate and assess cybersecurity testing activities including vulnerability assessments, penetration testing, software composition analysis, SAST, security scanning, and remediation planning.

You evaluate cybersecurity vulnerabilities, third-party software risks, software bills of materials (SBOMs) and end-of-life risks and support mitigation strategies together with development teams.

You prepare and maintain cybersecurity documentation required for regulatory submissions and market approvals, including IEC 81001-5-1 evidence, security whitepapers, and cybersecurity assessment reports.

You contribute to the continuous improvement of cybersecurity processes, methods, and tool chains across Advanced Therapies R&D.

To find out more about the specific business, have a look at Angiography

You hold a university degree in Cybersecurity, Computer Science, Software Engineering, Systems Engineering, Information Technology, or a related technical discipline.

You have several years of professional experience in product cybersecurity, application security, embedded security, system security, or a comparable field.

You have practical experience in threat modeling, security architecture design, cybersecurity risk assessment, and vulnerability management.

You have knowledge of cloud security, container security, IOT security, and AI security controls and concepts.

You are familiar with secure development life cycles and cybersecurity processes within regulated industries.

You have experience with cybersecurity standards and regulations such as IEC 81001-5-1, IEC 62304, FDA Cybersecurity Guidance, ISO 2701, IEC 62443, OWASP or the NIST Cybersecurity Framework.

You understand common security testing techniques such as penetration testing, fuzzing, security scanning, and software composition analysis.

Experience with requirements in engineering, systems engineering and traceability methods is highly desirable.

Professional cybersecurity certifications such as CISSP, CSSLP, CISM, GICSP, CEH or comparable certifications are considered a plus.

You combine strong analytical thinking with a structured and systematic working style.

You enjoy solving complex technical challenges and communicating cybersecurity concepts to multidisciplinary stakeholders.

You can balance cybersecurity requirements with patient…