Open Roles
Medical Device Cybersecurity
Threat Modeling Consultant
MedSec is seeking a Medical Device Cybersecurity Threat Modeling Consultant to lead and support threat modeling activities across a wide range of connected medical devices and healthcare systems.
​
This is a fully remote role, requiring strong self-management, proactive communication, and the ability to collaborate effectively with distributed teams and clients. Occasional travel (typically less than 10%) may be required for client engagements, industry conferences, or company meetings.
​
This role is ideal for someone who can think like both an attacker and a system architect; someone who understands how medical devices are built, how they fail, and how adversaries exploit them. This position regularly interacts with medical device manufacturers, engineering teams, quality and regulatory professionals, and executive stakeholders.
Principal Security Consultant – Medical Device Penetration Testing
MedSec is seeking a Principal Security Consultant specializing in penetration testing of medical devices, hardware platforms, firmware, wireless technologies, and connected healthcare ecosystems.
This is a highly technical, hands-on role focused on identifying exploitable vulnerabilities and helping clients improve the security of safety-critical products. Approximately 70–80% of time is spent performing technical testing and analysis, with the remainder dedicated to client communication, reporting, and engagement support.
Candidates with experience in other regulated or safety-critical industries, including automotive, aerospace, industrial control systems, IoT, and healthcare technologies, are encouraged to apply.