Product cybersecurity engineer

Werfen is a growing, family-owned, innovative company founded in 1966 in Barcelona, Spain. We are a worldwide leader in specialized diagnostics in the areas of Hemostasis, Acute Care Diagnostics, Transfusion, Autoimmunity, and Transplant. Through our Original Equipment Manufacturing (OEM) business line, we research, develop, and manufacture customized assays and biomaterials. We operate directly in 30 countries, and in more than 100 territories through distributors. Our Headquarters and Technology Centers are located in the US and Europe, and our workforce is more than 7,000 strong.

This position is part of the Product Cybersecurity Department, an organizational unit within the company that focuses on ensuring the security of its products and services. This department is responsible for implementing, managing, and overseeing cybersecurity measures specific to the development, deployment, and ongoing support of the company's products

The primary responsibility of the position involves designing, implementing, testing, and managing security measures to protect computer systems, networks, and data. The role requires a deep understanding of current and emerging cybersecurity threats, as well as the ability to develop, implement and test robust security solutions.

Key Accountabilities

• Perform threat modeling and design security measures on complex applications and web-based products
• Desing and implement advanced operating system hardening
• Design and implement basic networking protections such as VPNs and tunneling
• Design advanced hardening configuration of cloud solutions
• Design simple cryptography-based solutions for data privacy and integrity protection

Networking/Key relationships

A cybersecurity engineer interacts with different stakeholders including:

• Software development to plan and execute security and privacy by design activities
• Quality assurance to plan and execute cybersecurity testing across the product life-cycle
• Service to respond to on-market cybersecurity events impacting the company's products

Minimum Knowledge & Experience required for the position:

The qualifications required by the position are:

• Engineer, computer science or other technical degree, or equivalent work experience

The required work experience by the position is at least 4 years in one of the different tracks:

• Ethical hacking and penetration testing
• Product security by design
• Cloud Security operations

The following work experience and qualifications are a plus:

• Strong knowledge of secure coding practices and product security best practices
• Certifications such as Certified Ethical Hacker (CEH)
• Solid knowledge on SW testing process and methodology
• Knowledge on relevant standards such as ISO 27001
• Knowledge of medical device regulations

Skills & Capabilities:

The skills and capabilities required by the position are:

• Strong analytical and problem-solving skills to identify and address security challenges and vulnerabilities
• Effective communication skills to convey complex cybersecurity concepts to both technical and non-technical stakeholders
• Willingness to stay updated on the latest cybersecurity trends, threats, and technologies through continuous learning and professional development
• Ability to collaborate with cross-functional teams, share information, and work together to enhance overall cybersecurity posture

What we offer:

• A meaningful project that will impact the quality of laboratory software medicine worldwide
• 3 days a week working from home
• Multicultural and friendly team
• Exciting opportunities for professional development.
• Ongoing training
• Social benefits: Canteen, nursery check, continius training, Doctor at the office, retirement plan...
• All the benefits according to the chemical agreement

Werfen appreciates and values diversity. We are an Equal Opportunity/Affirmative Action Employer M/F/D/V.

Our Purpose:
We contribute to the advancement of patient care around the world through innovative specialized diagnostics

JOIN US