What are the responsibilities and job description for the Application Security Engineer III position at KARL STORZ North America?
About The Role
At KARL STORZ, we’re dedicated to advancing medical technology and improving patient care. We are seeking an Application Security Engineer III to lead cybersecurity compliance, verification, and secure development practices across regulated software and product environments.
This role partners closely with R&D, Quality, Regulatory, IT, and Product teams to ensure cybersecurity requirements are implemented, verified, and documented throughout the product lifecycle.
Key Responsibilities
KARL STORZ is an independent, family-owned MedTech company with over 80 years of innovation in endoscopic surgery and medical imaging. With 9,000 associates globally, we’re driven by precision, quality, and improving patient care worldwide.
At KARL STORZ, we’re dedicated to advancing medical technology and improving patient care. We are seeking an Application Security Engineer III to lead cybersecurity compliance, verification, and secure development practices across regulated software and product environments.
This role partners closely with R&D, Quality, Regulatory, IT, and Product teams to ensure cybersecurity requirements are implemented, verified, and documented throughout the product lifecycle.
Key Responsibilities
- Lead product cybersecurity compliance and verification activities in regulated environments
- Perform security assessments, vulnerability scanning, and risk analysis
- Author and maintain cybersecurity documentation and risk mitigation plans
- Guide engineering teams on implementing and validating security controls
- Embed secure development practices across the SDLC and CI/CD pipelines
- Support DevSecOps initiatives, including automated security testing
- Participate in product security reviews and cross-functional technical discussions
- Bachelor’s degree in Computer Science, Cybersecurity, or related field
- 5 years of experience in application, product, or embedded cybersecurity
- Experience working in regulated industries (medical device, aerospace, defense, etc.)
- Knowledge of security frameworks and vulnerability management practices
- Experience with secure SDLC, CI/CD, and DevSecOps principles
- Strong documentation and cross-functional communication skills
- Experience with medical device cybersecurity or FDA guidance
- Familiarity with NIST 800-series frameworks
- Security certifications (CISSP, CEH, Security )
- Experience with cloud or container security
- Strong problem-solving and analytical skills
- Ability to work independently and lead security initiatives
- Clear communication of technical risks and recommendations
- Opportunity to work on secure, cutting-edge medical technology
- Collaborative, cross-functional engineering environment
- Competitive compensation and comprehensive benefits
KARL STORZ is an independent, family-owned MedTech company with over 80 years of innovation in endoscopic surgery and medical imaging. With 9,000 associates globally, we’re driven by precision, quality, and improving patient care worldwide.