Biomedical Cybersecurity Specialist – Connected Medical Devices

MaxIT Consulting - Max Corporate Group; New York (NY); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Wellness programs

401(k) plan with matching

Paid time off

Company holidays

Professional development opportunities

Tuition reimbursement

Career growth opportunities

Job summary

MaxIT Consulting – Max Corporate Group seeks a Biomedical Cybersecurity Specialist focused on connected medical devices in a healthcare tech environment in New York. You will lead security controls, vulnerability management, and risk assessments for medical devices and HTM systems.

The role combines hands-on cybersecurity work with medical device knowledge, incident response, and regulatory compliance support in a regulated healthcare setting. Onsite work in Far Rockaway, NY is required.

Qualifications

• Minimum of 3 years of relevant functional experience.
• Bachelor's degree or equivalent professional experience.
• Experience with connected medical devices in healthcare environments.
• Healthcare cybersecurity experience.
• Knowledge of CMMS platforms for medical-device asset management.
• Understanding of NIST and ISO cybersecurity frameworks.
• Knowledge of FDA, Joint Commission, and HIPAA.
• Valid driver's license and acceptable driving record.

Responsibilities

• Lead collection and maintenance of cybersecurity Critical Data Elements for medical devices within CMMS platforms.
• Gather and maintain manufacturer cybersecurity documentation and recommendations.
• Conduct cybersecurity risk assessments based on asset data, manufacturer guidance, and identified vulnerabilities.
• Oversee secure configuration of medical devices in accordance with cybersecurity standards and manufacturer requirements.
• Lead planned vulnerability remediation activities, including patching and device upgrades.
• Coordinate urgent and unplanned remediation activities involving high-risk or zero‑day vulnerabilities.
• Work directly with medical device manufacturers on cybersecurity remediation and technical issues.
• Investigate cybersecurity alerts affecting medical devices and determine appropriate response actions.
• Analyze high and critical vulnerabilities and develop remediation recommendations.
• Track and report vulnerability‑management and remediation activities.
• Support testing and validation of network segmentation controls in coordination with hospital IT.
• Participate in IT projects that may affect connected medical devices and clinical technology.
• Identify opportunities to strengthen cybersecurity practices across Healthcare Technology Management and IT.
• Maintain quality and accuracy of cybersecurity data and documentation within CMMS.
• Support cybersecurity education and awareness for HTM and biomedical teams.
• Coach BMET professionals on cybersecurity hygiene and secure device configuration.
• Support hospital and enterprise audits involving cybersecurity and regulatory requirements.

Skills

Analytical skills

Communication skills

Cross-functional collaboration

NIST

ISO

Education

Bachelor's degree or equivalent

Tools

CMMS

Job description

• Zero-day response

Far Rockaway, New York | Onsite | Full-Time | Direct Hire

MaxIT Consulting – Max Corporate Group is seeking an experienced Biomedical Cybersecurity Specialist – Connected Medical Devices for a healthcare technology environment in New York.

This position focuses on the cybersecurity of connected medical devices and healthcare technology infrastructure. The successful candidate will lead critical technical activities involving medical device security controls, vulnerability management, risk assessment, asset cybersecurity data, network segmentation, and healthcare regulatory compliance.

This is a hands‑on individual‑contributor role that requires a combination of biomedical or medical device experience and healthcare cybersecurity expertise.

The Opportunity

You will work closely with Clinical Engineering, Healthcare Technology Management, hospital IT, Information Security teams, and medical device manufacturers to protect connected medical equipment and reduce cybersecurity risk.

The role combines technical cybersecurity execution, medical device knowledge, vulnerability remediation, risk analysis, compliance support, and cross‑functional coordination.

Candidates should be comfortable working directly with medical‑device inventories, manufacturers, hospital technology teams, security frameworks, and regulated healthcare environments.

Key Responsibilities

• Lead the collection and maintenance of cybersecurity Critical Data Elements for medical devices within CMMS platforms.
• Gather and maintain manufacturer cybersecurity documentation and recommendations.
• Conduct cybersecurity risk assessments based on asset data, manufacturer guidance, and identified vulnerabilities.
• Oversee secure configuration of medical devices in accordance with cybersecurity standards and manufacturer requirements.
• Lead planned vulnerability remediation activities, including patching and device upgrades.
• Coordinate urgent and unplanned remediation activities involving high-risk or zero‑day vulnerabilities.
• Work directly with medical device manufacturers on cybersecurity remediation and technical issues.
• Investigate cybersecurity alerts affecting medical devices and determine appropriate response actions.
• Analyze high and critical vulnerabilities and develop remediation recommendations.
• Track and report vulnerability‑management and remediation activities.
• Support testing and validation of network segmentation controls in coordination with hospital IT.
• Participate in IT projects that may affect connected medical devices and clinical technology.
• Identify opportunities to strengthen cybersecurity practices across Healthcare Technology Management and IT.
• Maintain quality and accuracy of cybersecurity data and documentation within CMMS.
• Support cybersecurity education and awareness for HTM and biomedical teams.
• Coach BMET professionals on cybersecurity hygiene and secure device configuration.
• Support hospital and enterprise audits involving cybersecurity and regulatory requirements.

Required Qualifications

• Minimum of 3 years of relevant functional experience.
• Bachelor's degree or equivalent professional experience.
• Previous biomedical, biomed, clinical engineering, or hands‑on medical device experience.
• Demonstrated healthcare cybersecurity experience.
• Experience working with connected medical devices in a hospital, healthcare technology, or medical‑device environment.
• Knowledge of medical device cybersecurity controls and risk‑assessment practices.
• Experience with vulnerability management, remediation, patching, or cybersecurity incident response.
• Familiarity with CMMS platforms used to manage medical‑device assets and documentation.
• Strong understanding of cybersecurity frameworks such as NIST and/or ISO.
• Knowledge of healthcare and medical‑device regulatory requirements including FDA, Joint Commission, and HIPAA.
• Understanding of network segmentation concepts and their application to connected medical devices.
• Strong analytical, communication, and cross‑functional collaboration skills.
• Ability to lead technical initiatives independently and coordinate across multiple technical teams.
• Valid driver's license and acceptable driving record.

Preferred Qualifications

Relevant cybersecurity certifications are considered a plus, including:

• CISSP
• HCISPP
• CEH
• CompTIA Security+

Experience within hospital systems, Healthcare Technology Management organizations, clinical engineering departments, biomedical environments, or medical‑device manufacturers will be especially valuable.

Technical Focus

Strong candidates should demonstrate experience across several of the following areas:

• Medical device cybersecurity
• Biomedical equipment
• Clinical Engineering
• Healthcare Technology Management
• CMMS
• Vulnerability management
• Patch management
• Zero‑day response
• Medical device risk assessments
• Cybersecurity controls
• Secure configuration
• Network segmentation
• NIST
• ISO
• FDA cybersecurity requirements
• HIPAA
• Joint Commission standards
• Hospital IT
• Information Security
• Medical device manufacturers

What Success Looks Like

The successful candidate will combine cybersecurity expertise with a practical understanding of medical‑device environments.

• Improving cybersecurity visibility across medical‑device inventories
• Leading vulnerability and patch‑remediation efforts
• Responding to high‑risk or zero‑day medical‑device vulnerabilities
• Conducting medical‑device cybersecurity risk assessmentsImproving CMMS cybersecurity data quality
• Implementing or validating security controls
• Supporting network segmentation initiatives
• Coordinating cybersecurity remediation with device manufacturers
• Supporting regulatory or cybersecurity audits
• Improving security awareness across biomedical and HTM teams

Benefits

The benefits package may include:

• Medical, dental, and vision coverage
• Wellness programs
• 401(k) plan with matching contributions
• Paid time off
• Company holidays
• Professional development opportunities
• Tuition reimbursement
• Career growth opportunities

Work Arrangement

This is an onsite position based in Far Rockaway, Queens, New York.

Candidates should live within a practical daily commuting distance of the work location.

Relocation assistance is not available.

Work Authorization

Candidates must be legally authorized to work in the United States for any employer.

Visa sponsorship is not available for this position, now or in the future.