Product Security Manager

Leica Microsystems has helped shape the future of microscopy for over 170 years by developing groundbreaking optical and digital solutions. As a global leader, we’re driven by continuous improvement to excite our customers and to create the best work environment for our people. Customer focus, innovation, and teamwork are at the core of our culture and the foundation of our success.

Want to be part of a company whose products are part of cutting-edge research around the world? Join Leica Microsystems in our commitment for brilliant solutions and insight.

Leica Microsystems is proud to work alongside a community of nine fellow Danaher Life Sciences companies. Together, we’re pioneering the future of science and medicine, developing products that enable researchers in the fight to save lives.

**OVERVIEW**

**YOUR RESPONSIBILITIES**
- Advise and inform R&D stakeholders on cybersecurity standards and best practices
- Support and advise senior management, product management, project management and R&D leaders on cybersecurity related activities and issues
- Continuously review, refine, and review all relevant R&D processes to adapt corporate requirements
- Assist project teams in the creation of Product Security Management Plans - including overall security design control requirements, patch management strategy and implementation roadmap.
- Ensure project teams consider industry standards for system hardening and secure coding
- Conduct threat modeling (e.g. STRIDE, Attack Trees) and risk assessment workshops
- Define security rule sets and support their implementation in static and dynamic code analyses tools
- Guide and train project teams to ensure direct and indirect security requirements are understood and implemented
- Train and support project teams on definition, execution, and documentation of penetration tests
- Review and approve product risk assessments on each development tollgate
- Set up and manage an effective vulnerability screening process across products within the BU
- Implement and manage supply chain security through Software Bill-of-Materials (SBOM)
- Support all stakeholders on patch management / vulnerability handling
- Management of cybersecurity findings (internal & external), regular reporting of incidents and metrics (NIST, CVSS Scoring)
- Triggering, supporting and leading the incident management process.
- Keeps abreast of information security and business trends in the industry through benchmarking and/or participation in professional associations.

**YOUR PROFILE**
- BS/MS degree in STEM (science, technology, engineering, mathematics) or equivalent.
- Passion for cybersecurity and know-how on state-of-the-art security technologies
- Collaborative and able to effectively interact and communicate with peers, management, and leadership teams on various technical levels
- Very good analytical skills to analyze direct and indirect product security requirements
- Proficiency in performing risk and impact assessments and determining treatment strategies
- Experienced in security threat modeling (e.g. STRIDE, Attack Trees) and the related tools
- Familiar with penetration testing, stress testing and vulnerability screening
- Direct experience with HIPAA, FDA, GDPR and other security and privacy governance is preferred
- Basic understanding of privacy enhancing technologies and regulations such as GDPR
- Familiar with methods and tools of modern software development on different platforms
- Strong facilitation, communication and presentation skills
- Fluency in written and spoken English and the ability to work in international teams and with international clients

**WHAT WE OFFER**
- Attractive salary and pension package
- Flexible working time models
- Performance is rewarded with us - we challenge and support you in your career planning
- We offer employees a wide range of training opportunities (including virtual) in languages, technology and the Danaher Business System (DBS) Academy
- With us you get the chance to successfully contribute your own ideas
- We offer a solid onboarding program including a one-month orientation phase
- Here you will find a reliable team that is a pleasure to work with.

**GET MORE INSIGHT**

Are you interested to discover new opportunities in an innovative, team-oriented environment?

When you join us, you’ll also be joining Danaher’s global organization, where 80,000 people wake up every day determined to help our customers win. As an associate, you’ll try new things, work hard, and advance your skills with guidance from dedicated leaders, all with the support of powerful **Danaher Business System **tools and the stability of a tested organization.

At Danaher, we value diversity and the existence of similarities and differences, both visible and not, found in our workforce, workplace and throughout the markets we serve. Our associates, customers and shareholders contribute unique and different perspectives as a result of these diverse attri