David Dashti · Product Security
Securing medical software from design through market clearance — and, increasingly, the AI moving into the devices themselves — at Hermes Medical Solutions, Stockholm.
FDA Premarket · IEC 81001-5-1 · EU MDR · Security+
Hermes Medical Solutions
May 2024 — Present · Stockholm, Sweden
Product security for regulated nuclear-medicine software: threat modeling, FDA premarket security documentation, IEC 81001-5-1 secure-lifecycle work, SBOM and vulnerability management — alongside QA/RA responsibility for V&V and market clearance.
Learn more about Hermes Medical Solutions
Philips Healthcare
Mar 2022 — May 2024 · Stockholm, Sweden
Level 1 support for Intellispace Portal and Cardiovascular across the Nordics and UK/Ireland — full incident lifecycle, upgrade assessment, and cross-regional knowledge sharing for enterprise imaging informatics.
Learn more about Philips Healthcare
Karolinska University Hospital
Jun 2021 — Dec 2021 · Stockholm, Sweden
First-line support for one of Europe's largest imaging-equipment fleets: RIS/PACS incident management, DICOM/HL7 integration work, and multi-vendor coordination across GE, Philips, and Siemens systems.
Learn more about Karolinska University Hospital
SoftPro Medical Solutions
Oct 2020 — Jun 2021 · Stockholm, Sweden
Thesis research integrating the Medusa inventory system with radiology equipment workflows — process modeling and multi-actor analysis to improve quality assurance in a radiology department.
Learn more about SoftPro Medical Solutions
Södersjukhuset - SÖS
Jun 2020 — Jun 2021 · Stockholm, Sweden
Radiology IT systems management at one of Stockholm's largest emergency hospitals: PACS/DICOM operations, supplier contract evaluations, workflow optimization, and system documentation.
Learn more about Södersjukhuset - SÖS
Jan 2026
Security+ Certification
Ongoing certification.
View certificate
Oct 2024 — Dec 2024
Certificate
Cybersecurity Fundamentals Course
View certificate
Aug 2018 — Jun 2021
Master of Science - MS
Biomedical Engineering - Computer Science
Master's Thesis - 'Improving Quality Assurance of Radiology Equipment Using Process Modelling and Multi-actor System Analysis'
Aug 2015 — Jun 2018
Bachelor of Science - BS
Biomedical Engineering
Bachelor's Thesis - 'Development of a User-friendly Method of Processing Data from Ergonomics Measurements Utilizing Inclinometers'
Research conducted at KTH Royal Institute of Technology in collaboration with SoftPro Medical Solutions. The thesis investigates methods to improve QA processes for radiology equipment through process modelling techniques and multi-actor system analysis, contributing to enhanced medical device quality management.
Research project at Lund University focusing on developing user-friendly data processing methods for ergonomics measurements using inclinometer sensors. The thesis explores practical applications in occupational health and workplace ergonomics assessment.
Loading GitHub stats...
Merged upstream contributions — supply-chain tooling, DICOM infrastructure, and LLM-security scanning. Each entry links to the pull request itself.
Product security specialist for medical software. I build security into medical devices from design through premarket submission.
I'm a biomedical engineer working as a QA/RA & Security Specialist at Hermes Medical Solutions, where I secure nuclear-medicine imaging software and help clear it for market — premarket cybersecurity, threat modeling, and security risk management, grounded in FDA premarket guidance and IEC 81001-5-1. As AI moves into these devices, I've started an early gap analysis against the EU AI Act to understand what it will ask of us. I also build my own tools — an internal RAG system over company data, still a work in progress, and in-house security tooling and tests.
Current focus areas
Technical skills
Windows Server, Unix/Linux, Docker, Kubernetes, PowerShell, Bash, Python, Rust and Git
I care about making healthcare technology safer and more trustworthy — protecting patients by making sure the software, and increasingly the AI, inside their care is secure by design.
View CVLet's talk — threat modeling, submissions, secure lifecycle, or all three.
Connect on LinkedIn
