Lead Medical Device Cybersecurity Engineer

Analog Devices; Wilmington (MA); On-site; USD 134,644 - 201,966; Full time

Benefits offered by this job

Discretionary bonus

Medical, vision and dental coverage

401k

Paid vacation and holidays

Job summary

Analog Devices, Inc. is seeking a Product Cybersecurity Engineer for medical devices to lead cybersecurity across the lifecycle. You will drive threat modeling, risk management, and regulatory documentation to ensure secure design and FDA-aligned submissions for SaMD solutions.

The role demands collaboration with internal and external teams, development of SDL practices, and post-market cybersecurity processes to protect medical device ecosystems.

Qualifications

• Master’s or PhD in Cybersecurity, Computer Science, Computer Engineering, Software Engineering, or related field; PhD preferred.
• Experience in cybersecurity for medical devices or SaMD across product lifecycle.
• Strong knowledge of regulatory standards and FDA submissions (510(k)).

Responsibilities

• Perform product security risk assessments and threat modeling for medical devices and SaMD platforms.
• Lead cybersecurity risk management across the product lifecycle, aligning with FDA guidance.

Skills

Threat modeling

Regulatory compliance

Cross-functional collaboration

Technical writing

Security risk assessment

Security architecture

Vulnerability management

FDA regulatory knowledge

Effective communication

Education

Master’s or PhD in Cybersecurity/CS/Engineering

PhD preferred

Tools

SBOM management

Vulnerability testing tools

Static/Dynamic analysis tools

Penetration testing tools

FDA regulatory documentation tools

Job description

Analog Devices, Inc. is seeking a Product Cybersecurity Engineer for medical devices to lead cybersecurity across the lifecycle. You will drive threat modeling, risk management, and regulatory documentation to ensure secure design and FDA-aligned submissions for SaMD solutions.

The role demands collaboration with internal and external teams, development of SDL practices, and post-market cybersecurity processes to protect medical device ecosystems.