Medical Device Penetration Tester

Nave Security is seeking a mid-to-senior level Medical Device Penetration Tester for an upcoming on-site assessment engagement. The selected contractor will conduct hands-on security testing of a medical devices and produce findings documentation in support of the client's security program. Travel may be required based on project needs. Responsibilities - Conduct hands-on penetration testing of medical device hardware, software, and supporting infrastructure - Perform network, wireless, and application-layer testing relevant to the device ecosystem - Assess communication interfaces (USB, Bluetooth, Wi-Fi, serial, proprietary protocols) for vulnerabilities - Review device firmware and software components for security weaknesses - Document findings with clear technical detail, risk ratings, and remediation guidance - Contribute to or produce a formal penetration test report suitable for client delivery Requirements - Located in the United States (required) - Ability to travel to if needed for on-site assessment work - 3+ years of hands-on penetration testing experience, with demonstrated medical device or embedded systems work - Familiarity with FDA cybersecurity guidance and premarket submission expectations - Experience testing medical device interfaces, DICOM/HL7 protocols, PACS systems, embedded Linux/RTOS environments, or healthcare network infrastructure Preferred Qualifications - Relevant penetration testing certifications - Experience with IEC 62443, IEC 81001-5-1, and FDA Premarket and Postmarket Cybersecurity Guidance - Prior work supporting FDA De Novo, 510(k) or PMA submissions - Familiarity with SBOM analysis and vulnerability management for medical devices - Background in biomedical engineering, healthcare IT, or clinical environments