Product Cybersecurity Expert (IT) - RZ (m/f/d)

REFERENCE NUMBER:

713838/1

MY DUTIES:

- End-to-end activities that belong to the secure software development lifecycle for products. Defining adequate cyber security mitigations, identifying threats, assessing risks, definition of security testing methods and scope, and track remediation actions of security findings during development
- Conduct planning and execution of 3rd party review activities (Verification & Validation) related to Cybersecurity and Software Architecture
- Proactively identify flaws in product security, assess patient safety and business risk, and advise product managers on remediation steps
- Advice product teams to plan and implement adequate cybersecurity maintenance activities throughout the product's lifecycle
- Support development and maintenance of processes and tools for threat modeling, cybersecurity risk assessment, security testing with penetration testing tools, like Kali Linux, OWASP ZAP, Nessus and others

MY QUALIFICATIONS:

- Related work experience in product security, with demonstrated experiences in areas such as
- SDLC in Software Development, Network technology, Cryptography, Cloud computing technologies, DevSecOps methodologies etc.
- Threat modeling, attack surface analysis, risk management, security testing, penetration testing and remediation activities
- Security by design and default concepts, OS hardening
- System and cloud infrastructure hardening and monitoring
- Preferable certifications: CISSP
- Working knowledge of security controls, guidelines and standards (e.g.ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOC 2, and NIST)
- Good understanding of privacy and data protection regulations (e.g., HIPAA, EU GDPR)
- Demonstrated soft skills: problem solving, leadership, communication, teamwork, flexibility and adaptability
- Fluent in English, German would be a plus

MY BENEFITS:

- Working in an international environment
- Renowned medical device company

ABOUT HAYS:

IT is and always has been our core business that laid the foundation for Hays' success. We are the biggest privately owned IT recruitment agency in Germany and offer the best jobs for every career level – whether you are interested in vacancies in agile SMEs or international DAX groups. Hays masters the entire IT job spectrum, from support to software architecture or digitalisation – thanks to our broad portfolio, we have something for everyone. In the last decades, we were able to support numerous IT experts with choosing the right path for a successful career, positioning ourselves as their lifelong partner. Our highly specialised consultants can cater to your every wish and expectation and will prepare you for interviews and contract negotiations. Give it a try and learn what the market has to offer – our services are free of charge, non-binding and discreet! We look forward to hearing from you.

MY CONTACT AT HAYS:

My contact person
David Justus Gareis

Reference number
713838/1

Contact
E-Mail: [email protected]
Phone: +41-(0)61-2250596