Together, we can beat cancer.
At Varian, a Siemens Healthineers Company, we bring together the world’s best talent to realize our vision of a world without fear of cancer. Together, we work passionately to develop and deliver easy-to-use, efficient oncology solutions.
We are part of an incredible community of scientists, clinicians, developers, researchers, professionals, and skilled specialists pushing the boundaries of what’s possible, to improve people’s lives around the world. We embrace a culture of inclusivity in which the power and potential of every individual can be unleashed. We spark ideas that lead to positive impact and continued success.
If you want to be part of this important mission, we want to hear from you.
As a Cybersecurity Engineer, you will be a member of the Cybersecurity Security team with the objective to ensure that Varian products, services, solutions and associated data are protected from cybersecurity threats throughout the entire life-cycle.
You deliver expert architecture design and tactical technical support across Varian portfolio. Your focus will be first and foremost on medical devices, with extended support software and service solutions.
Your day-to-day work will be to help establish and improve the security inspection capabilities within the product development pipelines and monitor the security of Varian’s products in the market. You will utilize existing tools, methodologies and strategies as well as devise any custom integrations and techniques to meet the demands of the Varian engineering systems.

Responsibilities:

• Help identify and implement solutions to effectively address security & privacy challenges.
• Perform threat, vulnerability, and risk assessments for Varian product, work with engineering teams to design and prioritize mitigating solutions.
• Create, maintain, and document security baselines with help of relevant tools/guidelines.
• Support comprehensive security assessments (e.g. Product Penetration Testing), analyze and capture results.
• Defines cybersecurity requirements to integrate cybersecurity standards into the design input
• Training and guidance for the developer teams about Cybersecurity related processes and topics
• Organizing the cybersecurity community and help with onboarding and training new cybersecurity colleagues into the product teams
• Independent reviewer of Product cybersecurity deliverables
• Improve the cybersecurity process and embed it into the product lifecycle process including updating the process with latest regulatory and compliance rules.
• Monitor product cyber-security threats and vulnerabilities, perform planned and on-demand Cybersecurity Risk Assessment for all customer products

Requirements:

• Deep knowledge of cyber security and hands-on experience with relevant tools/methodologies.
• Experience with: Threat Modeling, Vulnerability management, Cybersecurity Risk Management, Penetration Testing
• Bachelor’s degree in Cybersecurity, software engineering, computer science, related discipline, or equivalent experience.
• Excellent communication and teamwork skills, with fluent written and spoken English.
• Certifications in network and security administration such as CISSP, CISA or TOGAF certification are a plus.
• Java, C#, C++, Python programming - programming or scripting capabilities/experience

LI-OS1

Varian is required to comply with all local and applicable regulations that may be associated with vaccine requirements for certain roles.
Fighting cancer calls for big ideas.
We envision a world without fear of cancer. Achieving this vision takes dedication and commitment from all of us, every single day. That’s why we celebrate and value the distinctly beautiful and intersectional identities of each of our employees. We are a mirror of our patient-base, which allows us to innovate. Big ideas come from everywhere, and the best ideas are fostered by our unique individual experiences. At Varian, we encourage you to bring your whole self to work and believe your bold and authentic perspective will help to power more victories over cancer.

TogetherWeFight

About Us
Together, we can beat cancer.
Imagine a world without fear of cancer. We do, every day. Varian Medical Systems is the world’s leading manufacturer of medical devices and software for treating and managing cancer. For more than 70 years, we have developed, built, and delivered innovative cancer care technologies and solutions for our clinical partners around the globe to help them treat millions of patients each year.
Taking an Intelligent Cancer Care approach, we are harnessing advanced technologies like artificial intelligence, machine learning, and data analytics to advance cancer treatment and expand access to care to help patients become survivors.
When you join Varian, you become part of a global network of innovative and inspired minds working together across the globe. We keep the patient and our clinical partners at the center of our thinking as we power new victories in cancer care. Because for cancer patients everywhere, their fight is our fight.

• Help identify and implement solutions to effectively address security & privacy challenges.
• Perform threat, vulnerability, and risk assessments for Varian product, work with engineering teams to design and prioritize mitigating solutions.
• Create, maintain, and document security baselines with help of relevant tools/guidelines.
• Support comprehensive security assessments (e.g. Product Penetration Testing), analyze and capture results.
• Defines cybersecurity requirements to integrate cybersecurity standards into the design input
• Training and guidance for the developer teams about Cybersecurity related processes and topics
• Organizing the cybersecurity community and help with onboarding and training new cybersecurity colleagues into the product teams
• Independent reviewer of Product cybersecurity deliverables
• Improve the cybersecurity process and embed it into the product lifecycle process including updating the process with latest regulatory and compliance rules.
• Monitor product cyber-security threats and vulnerabilities, perform planned and on-demand Cybersecurity Risk Assessment for all customer product