Software & Cybersecurity Engineer
Pubblicato il 30-08-2026 - Steris in Italia
Position Summary We are looking for a candidate that will join our Cybersecurity team in Pomezia (Rome). The Cybersecurity Engineer II is a specialist working within the STERIS R&D; controls department. The responsibilities include: analyzing software and hardware for potential vulnerabilities, creating work instructions for secure software maintenance, collaborating with product development teams for secure designs, conducting vulnerability assessments, and participating in incident response efforts. He/she will focus on creating and maintaining the security standards that contribute to the safety and integrity of critical healthcare technology. Duties Receive and analyze CVEs from open‐source sources, determine applicability to STERIS products, and collaborate with product teams to gather information needed for CVE impact and applicability assessments. Develop and track software bill of materials (SBOM), track vulnerabilities in SBOM, and work with product teams to remediate the vulnerabilities.
Identify potential software security vulnerabilities and collaborate with product teams for remediation and planning. Assist and support product security risk assessments, requirements analysis, and test methods. Evaluate and execute product security testing including test planning, cases, and procedure development. Perform vulnerability assessment and network scanning activities. Perform internal fuzz testing to identify potential product vulnerabilities. Reproduce penetration testing findings to help product teams understand security issues and develop effective remediations. Implement proposed security controls/methods to software embedded in STERIS products and other software applications for the assigned product(s) or project(s). Research new techniques and methods to enhance internal security testing practices and improve overall device security. Duties - cont'd Participate in improvement projects related to Cybersecurity technology, tools, and practices. Work on cybe