At Spacelabs Healthcare, we innovate to improve clinical and economic outcomes through advanced healthcare technology. Our solutions deliver critical patient data, enable better decisions, and help create safer patient environments. Lives depend on you.
Find out if this opportunity is a good fit by reading all of the information that follows below.
The Role:
We are looking for a senior, hands-on Principal Cybersecurity Test Engineer to join our Cybersecurity Team. You will lead and execute advanced penetration testing across products, applications, infrastructure, and medical devices, ensuring robust security controls are in place and effective.
Responsibilities:
* Design and execute advanced penetration tests on products, applications, and systems, simulating real-world threat actor techniques
* Research emerging threats, vulnerabilities, and attacker intelligence using internal and external sources
* Create and manage security assessment plans; develop, evaluate, and apply exploits and testing tools
* Document test scope, scenarios, findings, evidence, and recommendations in formal reports
* Provide regular assessment status updates and participate in technical and management reviews
* Perform secure code reviews, integration testing, defect analysis, and implement approved software changes
* Support product investigations related to security complaints and incidents
* Develop internal tools to support Cybersecurity team activities
* Contribute to security awareness, training, and company-wide knowledge-sharing initiatives
* Collaborate closely with cross-functional teams, participate in requirements reviews, and adhere to corporate standards, processes, and procedures
Requirements:
* Deep expertise in firmware, OS, applications, networking, protocols, encryption, and access control
* Attend the office three times per week in Edinburgh.
* Strong coding skills (Assembly, C/C++, Java, C#, .NET, Python, etc.)
* Advanced knowledge of Linux & Windows, databases (SQL Server, MySQL, Postgres), and web/app servers
* Networking expertise (routing, switching, firewalls, vulnerabilities) xsngvjr
* Hardware security and hacking (JTAG, FPGA, USB, etc.)
* Proficiency with security tools (Kali Linux, Nessus, InsightVM, Metasploit, Burp Suite, Wireshark, NetSparker)
* Secure coding (OWASP), MITRE/SANS Top 25, SSDLC, static code analysis
* Security Frameworks (ISO 2700x, NIST Special Publications)
* Cloud development and cloud security testing
* Knowledge of medical device regulations and quality systems
* Familiarity with common attacks (XSS, CSRF, privilege escalation, auth/authz flaws, password cracking)
Education & Experience
* Degree in Computer Science, Cybersecurity, Information Security, or Software Engineering