Cybersecurity Architect / Engineer

Together, we can beat cancer.

At Varian, a Siemens Healthineers Company, we bring together the world's best talent to realize our vision of a world without fear of cancer. Together, we work passionately to develop and deliver easy-to-use, efficient oncology solutions.

We are part of an incredible community of scientists, clinicians, developers, researchers, professionals, and skilled specialists pushing the boundaries of what’s possible, to improve people’s lives around the world. We embrace a culture of inclusivity in which the power and potential of every individual can be unleashed. We spark ideas that lead to positive impact and continued success.

If you want to be part of this important mission, we want to hear from you.

Every role within IT has a cybersecurity aspect. Focusing on security as your primary role opens up a world of options. By continuing your career in IT security, you're not just safeguarding systems; you're shaping the future of technology. Embrace this dynamic field and let your expertise be the shield that protects and propels us into a secure and innovative digital age. Your journey in IT security is an invitation to be a pioneer, a protector, and a catalyst for positive change.

As a Cybersecurity Architect / Cybersecurity Engineer, you will be a member of the Cybersecurity Security team with the objective to ensure that Varian products, services, solutions and associated data are protected from cybersecurity threats throughout the entire life-cycle. You deliver expert architecture design and tactical technical support across Varian portfolio. Your focus will be first and foremost on medical devices, with extended support software and service solutions. Your day-to-day work will be to help establish and improve the security inspection capabilities within the product development pipelines. You will utilize existing tools, methodologies and strategies as well as devise any custom integrations and techniques to meet the demands of the Varian engineering systems.

This hybrid position can be based anywhere within Hungary, with occasional visits to the offices in Budapest.

Responsibilities include:

• Defines cybersecurity requirements to integrate cybersecurity standards into product design, including Secure Coding Guidelines, OWASP, SCA and DCA processes, SW component evaluation process, Secure Service and Support Model, Post-Market Cybersecurity Management Programs; evaluates and recommends the tools and technologies used; acts as process owner when appropriate.

• Work in collaboration with architects and engineers to represent DevOps during the design and development of software or extensive revisions to existing applications.

• Keep finding areas of improvement in the current infrastructure to be more resilient and reliable.

• Developing tools that empower the engineering team to validate code before deploying quickly and confidently.

• Infrastructure as a Service (AWS, Azure, Google Cloud Platform, etc)

• Familiarity with containers and related inspection capabilities (Docker, K8s, ECS, Fargate)

• Comprehension of SDLC

• Collaborate across teams to consolidate and simplify DevOps tools and services, then support other infrastructure engineers using them in production.

• Build libraries, modules, and packages for other infrastructure engineers to integrate with their projects.

• Develop secure Continuous Integration / Continuous Delivery (CI/CD) processes to help deliver software of higher quality at greater speed.

• Integration of cyber-security considerations into product design, implementation, review, update, and EOL management

• Configure security tools for static security code analysis and 3rd party and vulnerability analysis.

• Monitor product cyber-security threats and vulnerabilities, perform planned and on-demand Cybersecurity Risk Assessment; work with engineering teams to design and prioritize mitigating solutions.

• Define the standard security settings in products and solutions based on hardening standards.

• Provide hands-on technical support expertise in general SW design and development, system engineering, IT and networking as necessary.

• Maintain complete confidentiality of company and customer intelligence acquired at job.

• Working in Varian means working in a regulated medical device framework, the Cybersecurity Architect / Engineer should be familiar and understand the Cybersecurity Requirements that are coming from the Regulatory Affairs and Safety point of view. This also requires Good Documentation Practice, as support documentation for Medical Submissions like FDA or similar.

Required Skills and Knowledge:

• Excellent communication and teamwork skills, with fluent written and spoken English.
• Bachelor’s degree in software engineering, computer science or related discipline, or equivalent experience.
• Experience with Java or C# /.NET or C++, and Python.
• Scripting abilities with Unix command line (curl, grep, awk, sed, chmod, ssh, etc)
• Experience with web programming and technologies.
• Experience with CI/CD system components such as Jenkins, Concourse, Bamboo, Circle.
• Prefer candidates with a deep knowledge of software security and architectures.
• Cloud programming / Azure DevOps would be a plus.

#LI-Hybrid

#LI-OS1

Varian is required to comply with all local and applicable regulations that may be associated with vaccine requirements for certain roles.

Fighting cancer calls for big ideas.

We envision a world without fear of cancer. Achieving this vision takes dedication and commitment from all of us, every single day. That's why we celebrate and value the distinctly beautiful and intersectional identities of each of our employees. We are a mirror of our patient-base, which allows us to innovate. Big ideas come from everywhere, and the best ideas are fostered by our unique individual experiences. At Varian, we encourage you to bring your whole self to work and believe your bold and authentic perspective will help to power more victories over cancer.

#TogetherWeFight

Privacy Statement