Lead Cybersecurity Assurance Engineer - Remote

Solventum; Winters (TX); On-site; USD 124,000 - 171,000; Full time

Job summary

Solventum is seeking a Principal Cybersecurity Assurance Engineer to lead cybersecurity across the product lifecycle for medical device security. You will partner with hardware, software, QA and regulatory teams to ensure robust risk management, SBOMs and secure architectures.

You will mentor engineers and drive threat modeling, vulnerability assessments, and compliance with FDA, EU, ISO 13485 and related standards. Remote US-based work is supported with occasional travel.

Qualifications

• Bachelor’s degree or higher with eight years of cybersecurity experience supporting medical devices.
• Experience with embedded systems, IoT devices, Bluetooth, Wi‑Fi, and/or cellular technologies.
• Experience leading threat modeling and vulnerability assessments for embedded systems and IoT.
• Experience applying SAST/DAST, SBOM generation and monitoring, and CVSS/STRIDE frameworks.

Responsibilities

• Lead cybersecurity assurance activities across the product life cycle, including risk management plans, threat modeling, vulnerability assessments, security architecture, SBOMs and traceability to security controls.
• Ensure regulatory compliance and elevate major problems affecting patient safety, cybersecurity, or system adherence.
• Act as cybersecurity champion within development teams, analyze designs for vulnerabilities, and coordinate with hardware, software, QA and regulatory teams.
• Support continuous process improvements, external audits, CAPA, supplier audits, and other quality processes related to cybersecurity risk management.
• Supervise and mentor other cybersecurity assurance engineers.

Skills

Embedded systems

IoT devices

Bluetooth

Wi-Fi

Cellular tech

Threat modeling

Vulnerability assessments

Penetration testing

SAST/DAST

SBOM

SBOM monitoring

C programming

Education

Bachelor’s degree or higher

Job description

Solventum is seeking a Principal Cybersecurity Assurance Engineer to lead cybersecurity across the product lifecycle for medical device security. You will partner with hardware, software, QA and regulatory teams to ensure robust risk management, SBOMs and secure architectures.

You will mentor engineers and drive threat modeling, vulnerability assessments, and compliance with FDA, EU, ISO 13485 and related standards. Remote US-based work is supported with occasional travel.