Job Title:  Senior Software Engineer

Position Summary

The Software Engineer works within a software development team to achieve and maintain the security of medical equipment connected to local hospital networks and remote applications in the cloud.  This role is will be an active participant in the corporate cybersecurity working group to share best practices, software tools, vendor selection, and other cybersecurity related activities.  The Software Engineer will also support multiple product development and product sustaining teams in security related product requirements, design specifications, risk analysis, and verification, as well as develop work instructions for the maintenance and verification of security for product software.

Duties

• Collaborates with product development teams in the development of a product cybersecurity plans per STERIS work instructions
• Supports product development teams in creation of product cybersecurity threat model based upon software system design
• Leads product development teams in creation of cybersecurity vulnerability assessments to calculate CVSS scores and specify risk controls
• Supports teams in creation of documentation of cybersecurity risk management file
• Keeps abreast of state of the art cybersecurity practices and latest standards and verification techniques

Duties - cont'd

• Maintains regular, periodic vigilance of latest vulnerabilities in third party software and works with Regulatory and Quality teams to action to patch or develop work arounds for new vulnerabilities posing unacceptable risk
• Performs regular, periodic product security testing against STIGs for products sold into DOD medical centers
• Performs vulnerability scans on all device software prior to production release
• Patches fielded product software and performs or oversees verification of patched software (static/dynamic analysis, regression testing, vulnerability scans, etc.)
• Assists product development teams in penetration and fuzz testing of new products containing software
• Participates in design and code reviews and/or inspections to ensure proper implementation of security control measures defensive coding practices.

Education Degree

Required Experience

• 5-8 years related engineering experience
• Bachelor of Software or Biomedical Engineering degree required
• Experience solving complex engineering problems through accurate interpretation of requirements and test results
• Proficient in testing for C#, .NET MVC, WPF & XAML, Entity Framework, Defect tracking systems and Source Code Control Systems.
• Strong written & verbal communication skills
• Ability to work successfully both independently and in teams

Preferred Experience

• Advanced degree in Engineering or related field desired
• Engineering experience within a highly regulated industry
• Certification or training coursework in software security
• 1+ years experience of software development in C, C++, or C# highly desirable
• 1+ years experience in network communication interfaces desirable
• Experience performing risk assessments desirable

Skills

Technical Excellence:

• Analyzes and solves technical problems.
• Seeks input from more experienced individuals to improve quality of deliverables.
• Begins mastering the technical aspects of own job.
• Applies new technical tools and concepts under the direction of others.

Execution & Accountability:

• Completes assigned tasks on time with guidance and support.
• Documents status and results accurately and succinctly
• Provides clear and accurate data regarding product and process measurables

Creativity & Innovation:

• Works on mastering technical aspects of own job.
• Seeks feedback from others regarding ideas or suggestions.