Application Security Engineer III

KARL STORZ•Stafford, TX

About The Position

At KARL STORZ, we’re dedicated to advancing medical technology and improving patient care. We are seeking an Application Security Engineer III to lead cybersecurity compliance, verification, and secure development practices across regulated software and product environments. This role partners closely with R&D, Quality, Regulatory, IT, and Product teams to ensure cybersecurity requirements are implemented, verified, and documented throughout the product lifecycle.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or related field
5+ years of experience in application, product, or embedded cybersecurity
Experience working in regulated industries (medical device, aerospace, defense, etc.)
Knowledge of security frameworks and vulnerability management practices
Experience with secure SDLC, CI/CD, and DevSecOps principles
Strong documentation and cross-functional communication skills
Strong problem-solving and analytical skills
Ability to work independently and lead security initiatives
Clear communication of technical risks and recommendations

Nice To Haves

Experience with medical device cybersecurity or FDA guidance
Familiarity with NIST 800-series frameworks
Security certifications (CISSP, CEH, Security+)
Experience with cloud or container security

Responsibilities

Lead product cybersecurity compliance and verification activities in regulated environments
Perform security assessments, vulnerability scanning, and risk analysis
Author and maintain cybersecurity documentation and risk mitigation plans
Guide engineering teams on implementing and validating security controls
Embed secure development practices across the SDLC and CI/CD pipelines
Support DevSecOps initiatives, including automated security testing
Participate in product security reviews and cross-functional technical discussions