Senior Information Security Expert IRC305691

Description
Our client is innovative manufacturer of medical devices in the United States which produces a devices and software applications. At this project, you will have a great opportunity to be involved into the full development life cycle of medical software which is intended to help individuals by processing certain information taken from medical devices to identify health trends and to track daily activities.

Requirements
Knowledge of secure architecture & secure design (e.g. Zero Trust)
Strong knowledge of cybersecurity processes SSDF by NIST
Cross-team collaboration
Strong understanding of SAST tools management. Veracode experience will be an advantage.
Vulnerabilities evaluation and management
Secure IoT architecture design best practices (e.g. Zero Trust, firmware security)
Strong knowledge of secure design in healthcare solutions:
Data encryption
Data anonymization
Secure communication (HTTPS TLS/ mTLS, PKI)
Identity and Access Management
Scripting experience (e.g. Bash, Python, PS)
Strong knowledge of the latest FDA requirements
NHI and medical devices security

Job responsibilities
Owning and maintaining security activities required by SSDF process
Reporting to stakeholders
Collaboration with Development and architects team
Cybersecurity documentation management
Solution design and security requirements creation
Supporting/advising development team in security challenges