Software & Cybersecurity Engineer
Pubblicato il 04-10-2026 - Steris in Italia
Overview In this role you join the Cybersecurity team to secure STERIS/ Cantel medical software and hardware, focusing on vulnerability management and secure design. You will collaborate with product teams to embed security, perform assessments, and support regulatory deliverables to safeguard critical healthcare technology. You drive improvements in security testing practices and contribute to incident response. This position offers the chance to impact patient safety and healthcare outcomes through robust security controls.
Responsabilità
Analyze CVEs and assess applicability to product lines; collaborate with product teams for impact assessments
Develop and track SBOMs, monitor vulnerabilities, and coordinate remediation with product teams
Identify software security vulnerabilities and assist with remediation planning
Support product security risk assessments, requirements analysis, and test methods
Plan and execute product security testing, including test cases and procedures
Conduct vulnerability assessment and network scanning; perform internal fuzz testing
Reproduce and communicate penetration testing findings to guide remediation
Implement security controls in embedded software and related applications
Research new security testing techniques to enhance device security
Participate in cybersecurity improvement projects and regulatory deliverables (FDA 510(k))
Respond to customer cybersecurity questionnaires and produce FAQs/White Papers
Requisiti fondamentali
~ Bachelor's degree in computer engineering, Software Engineering, or Cybersecurity
~≥3 years in cybersecurity with risk assessments and security testing
~≥1 year in vulnerability assessment and SDLC
~ Proficiency in Python, C/C++/C#, Java
~ Experience evaluating penetration test results and recommending fixes
~ English proficiency at B2
~ desirable: vulnerability scanning tools, threat modeling, penetration testing
~ desirable: SSCP/CISSP, Windows/Linux OS knowledge
~ desirable: writing security require