Medical Device Cybersecurity Architect

Verathon; Bothell (WA); On-site; USD 148,000 - 182,000; Full time

Job summary

Verathon in Bothell, WA is looking for a Cybersecurity Engineer to join our R&D team and lead system-level cybersecurity for our medical devices. You will own product security architecture, threat modeling, and translate FDA and consensus standards into verifiable security requirements.

Work with Software, Quality and Regulatory teams across the lifecycle to ensure secure design, validated evidence, and compliant documentation for post-market updates and interoperability.

Qualifications

• Bachelor's degree in Systems Engineering, Electrical, Computer Engineering, or related field.
• 5+ years in cybersecurity engineering with 3+ years on connected or regulated products.
• Experience with STRIDE, PASTA, or TARA threat modeling methodologies.
• Knowledge of FDA premarket/postmarket cybersecurity guidance, IEC 62443, AAMI SW96, ISO 13485 QMS preferred.
• Experience with CVE/NVD triage and system-level risk assessment.
• Experience supporting third-party penetration testing engagements preferred.
• Strong written communication for audit-ready documentation.

Responsibilities

• Define product security architecture and interfaces; specify authentication, cryptography, secure update mechanisms, event logging, data integrity, and system hardening.
• Lead system-level threat modeling and allocate mitigations across hardware, firmware, and software.
• Derive cybersecurity requirements from FDA guidance and consensus standards; define verification strategies and ownership.
• Produce and maintain design-level product security documentation including architecture views and traceability matrices.
• Own the engineering interface during penetration testing; coordinate findings triage and remediation scope.
• Coordinate post-release remediation scope and verification with engineering and release teams.
• Lead interoperability security assessments for device interfaces and risk controls across operating modes.
• Conduct CVE impact analysis for fielded products and support remediation scoping.
• Contribute to release readiness for security-driven sustaining updates.

Skills

Systems engineering

Cybersecurity

Threat modeling

Regulatory compliance

Networking basics

Linux/Windows security

Education

Bachelor's degree in Systems Engineering, Electrical, or Computer Engineering

Tools

Visio

PlantUML

SysML

Job description

Verathon in Bothell, WA is looking for a Cybersecurity Engineer to join our R&D team and lead system-level cybersecurity for our medical devices. You will own product security architecture, threat modeling, and translate FDA and consensus standards into verifiable security requirements.

Work with Software, Quality and Regulatory teams across the lifecycle to ensure secure design, validated evidence, and compliant documentation for post-market updates and interoperability.