Cybersecurity Expert

Knowledge of Standards:

• Medical device development according to IEC 62304 in a quality management system according to ISO 13485
• Information management systems according to ISO 27001 and BSI 200, including internal audits according to ISO 19011
• Cybersecurity risk management according to ISO 14971, IEC 81001-5-1, and AARM TIR 57
• Information security management in healthcare according to ISO 27799
• Compliance with GDPR requirements
• Product safety according to BSI TR-03161, BSI TR-02102, and NIST
• FDA requirements for medical devices

---

Process Models:

• Agile software development according to SCRUM, Nexus, and SAFE
• Participation in all framework meetings
• Cross-functional handling of tasks according to a Definition of Done
• Review according to the 4-eyes principle
• Presentation of completed user stories during the Sprint Review
• V-Model
• Waterfall

---

Operating Systems:

• Android
• iOS
• Windows
• Linux / Unix

---

Languages:

• Java
• C#
• C++
• SQL
• C
• X86 Assembler
• CSS
• HTML
• JavaScript

---

Patterns:

• MVVM Cybersecurity: Consideration of OWASP TOP 10
• Threat assessment according to CVSS and STRIDE
• HIPAA compliance, MDR, and FDA criteria for cybersecurity
• OWASP criteria for cybersecurity, secure implementation, and SBOM
• Penetration testing with a focus on OWASP criteria

---

Project management:

• MS Office
• Azure DevOps
• MS Project
• SVN
• Git
• Jira
• IBM Doors

---

Other Tools:

• MS Visual Studio
• Eclipse
• Enterprise Architect
• Android Studio