Staff Cybersecurity Engineer

Onsite in Redmond, WA, with opportunities to lead cybersecurity across connected medical devices, cloud solutions, and software development environments. This Staff role at Stryker combines technical leadership with cross-functional partnership to design secure products, manage cybersecurity risk, and support compliance with applicable industry and regulatory requirements.

Compensation: USD 118,000 - 196,600 per year.

What you’ll do

• Lead the design and implementation of cybersecurity solutions across connected products, cloud platforms, and supporting systems, partnering with software and hardware architects to define secure architecture, standards, and engineering best practices.
• Drive threat modeling, security assessments, architecture reviews, and cybersecurity risk assessments for new and existing products, ensuring identified risks and vulnerabilities are remediated effectively.
• Advance secure software development and DevSecOps practices by integrating cybersecurity requirements throughout the product development lifecycle.
• Develop and maintain strategies for Software Bill of Materials (SBOM) generation, governance, and compliance across product portfolios.
• Assess and mitigate cybersecurity risks tied to third-party software, open-source components, and the broader software supply chain.
• Own ongoing vulnerability monitoring, triage, remediation, and postmarket cybersecurity assessments, working with Quality and Regulatory Affairs on mitigation planning.
• Support coordinated vulnerability disclosure, including collaboration with external security researchers and management of reported product security vulnerabilities.
• Collaborate across teams including Product Security, Software Engineering, Quality, Regulatory Affairs, Privacy, Customer Support, Sales, and IT to ensure cybersecurity objectives and requirements are met.

Required qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related technical discipline.
• 4+ years of experience in cybersecurity, software engineering, systems engineering, or a related field.
• Experience leading complex technical initiatives across multiple teams and organizations.
• Expertise in two or more of the following areas: Product Security.
• Expertise in two or more of the following areas: Application Security.
• Expertise in two or more of the following areas: Security Architecture.
• Expertise in two or more of the following areas: DevSecOps.
• Expertise in two or more of the following areas: Software Supply Chain Security.
• Expertise in two or more of the following areas: Identity and Access Management.
• Expertise in two or more of the following areas: Threat Detection and Monitoring.
• Expertise in two or more of the following areas: Incident Response.

Preferred qualifications

• Experience in medical devices, healthcare, or other regulated industries, including securing connected products, embedded systems, and cloud-based solutions.
• Experience with SBOM management, vulnerability management, and software supply chain security, including assessment and mitigation of third-party and open-source risks.
• Experience supporting postmarket cybersecurity programs and working within recognized cybersecurity and regulatory frameworks, including FDA cybersecurity guidance, IEC 62443, IEC 62304, NIST Cybersecurity Framework, and ISO 27001.
• CISSP, CCSP, CISM, GSEC, GIAC, or equivalent cybersecurity certification.

Benefits

• Medical and prescription drug insurance
• Dental insurance
• Vision insurance
• critical illness insurance
• accident insurance
• hospital indemnity insurance
• personalized healthcare support
• wellbeing program
• tobacco cessation program
• Health Savings Account (HSA)
• Flexible Spending Accounts (FSAs)
• 401(k) plan
• Employee Stock Purchase Plan (ESPP)
• basic life and AD&D insurance
• short-term disability insurance
• 12 paid holidays annually
• bonuses
• insurance benefits
• retirement programs
• service and performance awards
• wellness programs
• various social and recreational activities (location specific)