At Spacelabs Healthcare, we innovate to improve clinical and economic outcomes through advanced healthcare technology. Our solutions deliver critical patient data, enable better decisions, and help create safer patient environments. Lives depend on you.
The Role:
We are looking for a senior, hands-on Principal Cybersecurity Test Engineer to join our Cybersecurity Team. You will lead and execute advanced penetration testing across products, applications, infrastructure, and medical devices, ensuring robust security controls are in place and effective.
Responsibilities:
Design and execute advanced penetration tests on products, applications, and systems, simulating real-world threat actor techniques
Research emerging threats, vulnerabilities, and attacker intelligence using internal and external sources
Create and manage security assessment plans; develop, evaluate, and apply exploits and testing tools
Document test scope, scenarios, findings, evidence, and recommendations in formal reports
Provide regular assessment status updates and participate in technical and management reviews
Perform secure code reviews, integration testing, defect analysis, and implement approved software changes
Support product investigations related to security complaints and incidents
Develop internal tools to support Cybersecurity team activities
Contribute to security awareness, training, and company-wide knowledge-sharing initiatives
Collaborate closely with cross-functional teams, participate in requirements reviews, and adhere to corporate standards, processes, and procedures
Requirements:
Deep expertise in firmware, OS, applications, networking, protocols, encryption, and access control
Attend the office three times per week in Edinburgh.
Strong coding skills (Assembly, C/C++, Java, C#, .NET, Python, etc.)
Advanced knowledge of Linux & Windows, databases (SQL Server, MySQL, Postgres), and web/app servers
Networking expertise (routing, switching, firewalls, vulnerabilities)
Hardware security and hacking (JTAG, FPGA, USB, etc.)
Proficiency with security tools (Kali Linux, Nessus, InsightVM, Metasploit, Burp Suite, Wireshark, NetSparker)
Secure coding (OWASP), MITRE/SANS Top 25, SSDLC, static code analysis
Security Frameworks (ISO 2700x, NIST Special Publications)
Cloud development and cloud security testing
Knowledge of medical device regulations and quality systems
Familiarity with common attacks (XSS, CSRF, privilege escalation, auth/authz flaws, password cracking)
Education & Experience
Degree in Computer Science, Cybersecurity, Information Security, or Software Engineering
TPBN1_UKTJ