Work Flexibility: Hybrid
Who We Want:
The Product Security Engineer will be a valued skilled within the Stryker organization. They will lead efforts to design, execute, and continually improve the effectiveness of the vulnerability management processes for Stryker products. This Engineer will develop strategies and plans to create, sustain, and optimize the various aspects of vulnerability management including roles, processes, and technologies for Stryker medical devices and advanced solutions. This role will develop and optimize automated solutions for the generation of software bills of material, continuous vulnerability monitoring, and vulnerability resolution processes throughout the product lifecycle.
What You Will Do:
Create and own strategies that prioritize objectives for creating effective vulnerability management processes across the entire lifecycle of medical device and associated solutions.
Develop efficient solutions for determining the disposition of vulnerabilities produced through internal assessments and analysis efforts throughout the product lifecycle.
Guide product development teams in completing overall vulnerability management procedures within a defined security risk management process.
Work with product teams and product security services teams to develop and optimize the generation, repositories, and version management of software bills of material (SBOM) for a variety of medical device technologies.
Design and implement SBOM configuration management solutions to enable continuous vulnerability management processes.
Develop and own the policy and process of coordinated vulnerability disclosure.
Review current state and desired state of vulnerability assessment capabilities to define a roadmap needed improvements.
Work with tool vendors to develop and implement vulnerability management solutions associated with in-market medical devices and health software products.
Develop standards and internal guidance for the timeliness of security