Cybersecurity Intern - Connected Medical Devices | 80-100% Fixed-Term Role – 6 Months

In an Automated Insulin Delivery (AID) system, cybersecurity is not only about protecting data. A cyber incident can directly become a patient safety issue. As a Cybersecurity Intern, you will gain hands-on experience in cybersecurity risk management for connected medical devices and see how regulatory requirements, including those of the FDA, influence real engineering decisions. You will contribute to our transition from CVSS 3.1 to CVSS 4.0, helping us strengthen the way we analyse and manage security risks throughout the product lifecycle. You will work within a complex system-of-systems involving a wearable insulin pump, continuous glucose monitoring sensors, mobile applications and cloud platforms. Your work will include mapping trust boundaries and security dependencies across Bluetooth and Wi-Fi interfaces, as well as supporting the identification and assessment of cybersecurity risks. **Your main tasks** * Support cybersecurity risk management activities for connected medical devices and their software ecosystems * Contribute to the transition from CVSS 3.1 to CVSS 4.0 and help define practical assessment approaches * Analyse system architectures, trust boundaries and security dependencies across pump, sensor, mobile app and cloud environments * Apply STRIDE threat-modelling methods to identify potential threats and vulnerabilities * Assess software components and their security implications, including SBOMs, SOUP and open-source or off-the-shelf libraries * Support the development of company procedures for cybersecurity during pre-market development and post-market surveillance * Help translate technical cybersecurity risks into potential patient safety risks * Collaborate with system engineers, software engineers and verification engineers to define and demonstrate appropriate mitigations * Explore how Agentic AI could support post-market surveillance by scanning external threat databases, vulnerability disclosures and industry information * Use Python and APIs to support automation, data analysis and experimentation with AI-supported Workflows **Your Profile** * Currently studying or recently graduated in Computer Science, Cybersecurity, Systems Engineering, Biomedical Engineering or a related discipline * Strong curiosity about connected medical devices and system-of-systems architectures * Interest in threat modelling, particularly STRIDE * Interest in software security supply chains, SBOM, SOUP and third-party components * Interest in vulnerability scoring systems such as CVSS * Analytical and structured approach to complex technical problems * Ability to communicate clearly and collaborate with colleagues from different engineering disciplines * Hands-on familiarity with Python, APIs or automation is an advantage * Interest in applying Agentic AI to practical cybersecurity and engineering challenges * Very good command of English; German is an advantage