David Dashti
Product Security Engineer - Regulated Medical Software
Stockholm, SE · LinkedIn · GitHub · dashti.se
Biomedical Engineer focused on product cybersecurity for regulated medical software. Experienced extending STRIDE-based threat models into concrete, product-specific security requirements and supporting vulnerability evaluation using SBOM-driven SCA. Comfortable translating FDA premarket cybersecurity guidance and IEC 81001-5-1 expectations into structured security evidence and SDLC improvements.
Experience
QA/RA & Security Specialist
May 2024 — Present
Hermes Medical Solutions · Stockholm, Sweden
- Extending STRIDE-based threat models with product-specific threats and translating them into actionable, traceable security requirements for medical software.
- Conducting SBOM-based SCA by manually compiling SBOMs from SOUP lists and analyzing with Grype; triaging vulnerabilities and feeding results into risk assessments and post-market monitoring.
- Improving secure development practices by advocating Roslyn-based static analysis (rules tailored to a desktop DICOM viewer) and introducing DICOM fuzzing as dynamic security testing, supporting FDA premarket cybersecurity guidance and IEC 81001-5-1 documentation needs.
Incident Support Specialist, Nordics & IIG
Mar 2022 — May 2024
Philips · Stockholm, Sweden
- Spearheaded Level 1 support for image processing systems in healthcare IT across Nordics, UK&I, and IIG.
- Collaborated with installation teams to resolve support cases and improve system integrations.
Biomedical Engineer, Medical Imaging and Physiology
Jun 2021 — Dec 2021
Karolinska Universitetssjukhuset · Stockholm, Sweden
- Provided support for imaging IT systems and a large imaging equipment fleet at two hospital sites.
Master Thesis Student
Oct 2020 — Jun 2021
SoftPro Medical Solutions · Stockholm, Sweden
- Drove digital transformation by integrating Medusa with the workflow for maintenance of radiology equipment, enhancing QA processes.
Biomedical Engineer, Radiology Department
Jun 2020 — Jun 2021
Södersjukhuset AB · Stockholm, Sweden
- Provided support for IT systems and imaging equipment for a radiology department.
Technician, Engine Analysis
Jun 2016 — Aug 2016
Scania Group · Södertälje, Sweden
- Handled troubleshooting cases from intake to resolution while coordinating with production teams.
Platoon Leader, 2nd Lieutenant (Military Service)
Jan 2014 — Jan 2015
Finnish Defence Forces · Ekenäs, Finland
- Day-to-day command of 150 soldiers.
- Field operation command of 30 soldiers.
- In-depth officer training in stress resilience and organizational skills.
Technician, Engine Analysis
Jun 2012 — Aug 2012
Scania Group · Södertälje, Sweden
- Supported a team of engineers and technicians, acquiring foundational troubleshooting skills.
Skills
Security Engineering
Secure SDLC / DevSecOpsThreat Modeling (STRIDE)Security Requirements (traceability)SBOM (SOUP-based) / SCA (Grype)Vulnerability Evaluation / TriageStatic Analysis EnablementFuzzing / Dynamic Security Testing
Programming & Tooling
PythonPowerShellBashGitDockerLinux (Ubuntu Server)
Standards & Regulations
IEC 81001-5-1FDA Premarket Cybersecurity GuidanceISO 27001 (alignment)NIS2 (alignment)
Domain
DICOMPACSMedical Imaging
Education
Master of Science (MS), Biomedical Engineering - Computer Science
Aug 2018 — Jun 2021
Royal Institute of Technology in Sweden (KTH)
Master's Thesis: Improving Quality Assurance of Radiology Equipment Using Process Modelling and Multi-actor System Analysis
Bachelor of Science (BS), Biomedical Engineering
Aug 2015 — Jun 2018
Lund University, Faculty of Engineering (LTH)
Bachelor's Thesis: Development of a User-friendly Method of Processing Data from Ergonomics Measurements Utilizing Inclinometers
Languages
Swedish (Native) · English (Fluent)