Senior Security Engineer – Medical Device Cybersecurity & Compliance

Arrow Electronics


Date: 3 weeks ago
City: Ahmedabad, Gujarat
Contract type: Full time
Position

Senior Security Engineer – Medical Device Cybersecurity & Compliance

Job Description

Job Description

Job Title: Senior Security Engineer – Medical Device Cybersecurity & Compliance

Experience Level: 5-10 years

Key Responsibilities

  • Drive end-to-end cybersecurity integration across the medical device product development life cycle, ensuring security is embedded from concept to release.
  • Develop and maintain cybersecurity for medical products, including security requirements specifications, risk assessments, threat models, and product security architecture documentation.
  • Conduct thorough gap assessments to evaluate compliance with IEC 81001-5-1, IEC 60601-4-5, AAMI TIR 57, and AAMI TIR 97 standards, and implement remediation measures.
  • Perform hands-on vulnerability assessments, penetration testing, and secure code reviews of embedded devices, IoMT (Internet of Medical Things) components, and connected systems.
  • Collaborate closely with development, compliance, and regulatory teams to ensure product security measures meet both internal security policies and external regulatory expectations.
  • Support SBOM management, software supply chain risk evaluations, and third-party component analysis to maintain software transparency and mitigate risks.
  • Provide expert input on secure communication protocols, encryption standards, data protection for both at-rest and in-transit data, and cloud-based connectivity of medical systems.
  • Assist in developing incident response strategies and bring working knowledge of HIPAA, GDPR, and HL7 to address data privacy and healthcare-specific regulatory concerns.
  • Contribute to the continuous enhancement of internal secure development processes, tools, and methodologies, while championing security best practices within product teams.

Required Skills And Qualifications

  • Minimum of 6 years of experience in cybersecurity, including at least 3 years focused on medical devices, embedded systems, or IoT security.
  • Proven track record in authoring security design, defining technical requirements, and documenting security architectures aligned with regulatory needs.
  • Hands-on experience in embedded system security including secure boot, firmware security, threat modeling techniques (e.g., STRIDE, DREAD), and product-level risk assessments.
  • Strong understanding of IEC 81001-5-1, IEC 60601-4-5, AAMI TIR 57, and AAMI TIR 97, along with working knowledge of the medical device product development lifecycle and quality standards like ISO 14971.
  • Demonstrated expertise in vulnerability management and penetration testing of connected products across device and cloud ecosystems.
  • Familiarity with data privacy and interoperability standards such as HIPAA, GDPR, and HL7 is highly desirable.
  • Excellent problem-solving skills, critical thinking, and ability to lead gap analysis and remediation activities in regulated environments.
  • Strong collaboration skills with the ability to influence cross-functional teams including R&D, compliance, and product management.

Location:

IN-GJ-Ahmedabad, India-Ognaj (eInfochips)

Time Type

Full time

Job Category

Engineering Services

How to apply

To apply for this job you need to authorize on our website. If you don't have an account yet, please register.

Post a resume

Similar jobs

Lead - Category Expert

Livspace, Ahmedabad, Gujarat
6 days ago
About UsLivspace is Asia’s largest and fastest-growing home interiors and renovation platform. Leveraging its proprietary technology, the company delivers end-to-end home interior and renovation solutions, encompassing modular solutions, furniture, false ceilings, soft furnishings, décor, civil works, and more. The company serves homeowners across diverse market segments in India and Singapore.Since the company was founded in 2015, Livspace has revolutionized a...

Graphic Design & Video Intern

Tatvic , Ahmedabad, Gujarat
1 week ago
Company DescriptionTatvic, is a marketing analytics company focusing on generating insights from data using long association with Google & its infrastructure. We breed, recognize and reward performance. As a company we are growing very fast & we are under transformation. To enable this transformation we need future leaders with eyesight which balances execution & strategic understanding.Website: www.tatvic.comWe’re Hiring: Graphic Design...

Cloud Support Engineer

Oracle, Ahmedabad, Gujarat
1 week ago
Job DescriptionAs a member of the Support organization, your focus is to deliver post-sales support and solutions to the Oracle customer base while serving as an advocate for customer needs. This involves resolving post-sales non-technical customer inquiries via phone and electronic means, as well as technical questions regarding the use of and troubleshooting for our Electronic Support Services. A primary...