Product Security Engineer, Applications (m/f/d)

MED-EL is a leading manufacturer of innovative medical devices for the treatment of various types and degrees of hearing loss. Our unique portfolio of implantable hearing solutions benefits thousands of individuals in more than 140 countries worldwide. With headquarters in Innsbruck, Austria, MED-EL has over 3,300 employees around the world.

RDAC_12608
Product Security Engineer, Applications (m/f/d)
Research & Development
Innsbruck, Austria
Professionals Full-Time 38.5h Permanent

At MED-EL, cybersecurity is a key to delivering secure, innovative hearing solutions. Our independent Product Security unit collaborates closely with development teams to identify risks, embed security-by-design practices, and strengthen the security of applications, cloud services, and connected devices.

• Conduct security assessments, including vulnerability scanning, penetration testing, secure code reviews, and reverse engineering of applications and products

• Perform threat modeling and security risk assessments for software, connected devices, and cloud-based service

• Collaborate with product development teams to integrate secure-by-design principles across applications and connected devices throughout the product lifecycle

• Lead application security vulnerability management, including identification, prioritization, remediation support, and verification of security findings

• Develop and maintain security standards, guidelines, and best practices to support secure product development and strengthen the security of MED-EL's innovative hearing solutions

• Bachelor's degree or higher degree (University, FH) in Computer Science, Software Engineering, Information Security, or a related technical field, or equivalent practical experience

• Proven experience in product and application security, including security testing and secure software development practices

• Strong understanding of secure SDLC, secure coding, threat modeling, cryptography, application security, cloud technologies, and common security testing methodologies and tools