David Dashti — Product Security · QA/RA
Securing medical software from design through market clearance — and, increasingly, the AI moving into the devices themselves — at Hermes Medical Solutions, Stockholm.
FDA Premarket · IEC 81001-5-1 · EU MDR · Security+
May 2024 — Present
QA/RA & Security Specialist
Stockholm, Sweden
Product security for regulated nuclear-medicine software: threat modeling, FDA premarket security documentation, IEC 81001-5-1 secure-lifecycle work, SBOM and vulnerability management — alongside QA/RA responsibility for V&V and market clearance.
Learn more about Hermes Medical Solutions
Mar 2022 — May 2024
Incident Support Specialist, Nordics
Stockholm, Sweden
Level 1 support for Intellispace Portal and Cardiovascular across the Nordics and UK/Ireland — full incident lifecycle, upgrade assessment, and cross-regional knowledge sharing for enterprise imaging informatics.
Learn more about Philips Healthcare
Jun 2021 — Dec 2021
Biomedical Engineer, Medical Imaging and Physiology
Stockholm, Sweden
First-line support for one of Europe's largest imaging-equipment fleets: RIS/PACS incident management, DICOM/HL7 integration work, and multi-vendor coordination across GE, Philips, and Siemens systems.
Learn more about Karolinska University Hospital
Oct 2020 — Jun 2021
Master Thesis Student
Stockholm, Sweden
Thesis research integrating the Medusa inventory system with radiology equipment workflows — process modeling and multi-actor analysis to improve quality assurance in a radiology department.
Learn more about SoftPro Medical Solutions
Jun 2020 — Jun 2021
Biomedical Engineer, Radiology Department
Stockholm, Sweden
Radiology IT systems management at one of Stockholm's largest emergency hospitals: PACS/DICOM operations, supplier contract evaluations, workflow optimization, and system documentation.
Learn more about Södersjukhuset - SÖS
Jun 2016 — Aug 2016
Technician, Engine Analysis
Södertälje, Sweden
Owned the engine troubleshooting process end-to-end — case intake to resolution — coordinating across the production chain and establishing documentation and work routines.
Learn more about Scania Group
Jan 2014 — Jan 2015
Platoon Leader, 2nd Lieutenant
Dragsvik, Finland
Day-to-day command of 150 marine commandos and field command of a 30-soldier unit — leadership, decision-making under pressure, and personnel development in a coastal defense brigade.
Learn more about Finnish Defence ForcesJun 2012 — Aug 2012
Technician, Engine Analysis
Södertälje, Sweden
First industry role, on the second-line engine support team — building troubleshooting fundamentals alongside experienced engineers and learning how a heavy-vehicle production organization works.
Learn more about Scania Group
Jan 2026
Security+ Certification
Ongoing certification.
View certificate
Oct 2024 — Dec 2024
Certificate
Cybersecurity Fundamentals Course
View certificate
Aug 2018 — Jun 2021
Master of Science - MS
Biomedical Engineering - Computer Science
Master's Thesis - 'Improving Quality Assurance of Radiology Equipment Using Process Modelling and Multi-actor System Analysis'
Aug 2015 — Jun 2018
Bachelor of Science - BS
Biomedical Engineering
Bachelor's Thesis - 'Development of a User-friendly Method of Processing Data from Ergonomics Measurements Utilizing Inclinometers'
Research conducted at KTH Royal Institute of Technology in collaboration with SoftPro Medical Solutions. The thesis investigates methods to improve QA processes for radiology equipment through process modelling techniques and multi-actor system analysis, contributing to enhanced medical device quality management.
Research project at Lund University focusing on developing user-friendly data processing methods for ergonomics measurements using inclinometer sensors. The thesis explores practical applications in occupational health and workplace ergonomics assessment.
Loading GitHub stats...
Product security specialist for medical software. I build security into medical devices from design through premarket submission.
I'm a biomedical engineer working as a QA/RA & Security Specialist at Hermes Medical Solutions, where I secure nuclear-medicine imaging software and help clear it for market — premarket cybersecurity, threat modeling, and security risk management, grounded in FDA premarket guidance and IEC 81001-5-1. As AI moves into these devices, I've started an early gap analysis against the EU AI Act to understand what it will ask of us. I also build my own tools — an internal RAG system over company data, still a work in progress, and in-house security tooling and tests.
Current focus areas
Technical skills
Windows Server, Unix/Linux, Docker, Kubernetes, PowerShell, Bash, Python, Rust and Git
I care about making healthcare technology safer and more trustworthy — protecting patients by making sure the software, and increasingly the AI, inside their care is secure by design.
Let's talk — threat modeling, submissions, secure lifecycle, or all three.
Connect on LinkedIn