Senior Product Security Engineer

Stryker, a global leader in medical technology, is seeking a Senior Product Security Engineer for a hybrid role in Bengaluru. This position offers a unique opportunity to safeguard cutting-edge medical devices and applications by managing comprehensive vulnerability assessment and penetration testing programs. You will be instrumental in identifying and mitigating security risks across web, mobile, and embedded systems, as well as exploring potential vulnerabilities in interfaces like USB, WiFi, and Ethernet. A key aspect of this role involves conducting thorough manual and automated security code reviews for complex desktop, web, and mobile applications. You will also play a vital part in embedding security testing throughout the Software Development Life Cycle (SDLC) by leveraging DevSecOps principles. Your responsibilities will include providing essential support and insights for issue remediation and preparing detailed test plans and reports to document all security testing activities.

The ideal candidate will possess a Bachelor's degree in Software/Electronics Engineering or an equivalent qualification, coupled with 3 to 7 years of practical experience in vulnerability and penetration testing. Proficiency with industry-standard tools such as Kali, Nessus, Burpsuite, and Qualys is essential. Experience in automating routine security tasks using tools like Jenkins and scripting languages like PowerShell, Ruby, or Python is highly valued. A solid understanding of cloud-based environments, including Azure and AWS, is also required. Preferred qualifications include competency in penetration testing AI models (e.g., CNN, LLM, Voice, Agentic) and at least one professional certification such as ECSA Practical/CPENT/LPT/OSCP/OSWE/OSCE, particularly those involving practical exams. Excellent communication and interpersonal skills are paramount for collaboration within the team and across departments.