Principal Cybersecurity Assurance Engineer (Remote - United States)

Solventum; Northern (KY); Hybrid; USD 124,000 - 171,000; Full time

Job summary

Solventum is a new healthcare company, evolving from a legacy of solving big challenges to improve lives and support healthcare professionals. This role leads cybersecurity assurance across the product lifecycle, shaping risk management, threat modeling, and regulatory compliance to safeguard patients and data.

The position requires strong collaboration with hardware, software, and quality teams, with opportunities to mentor others and drive continuous improvement in security and product

Qualifications

• Bachelor’s degree or higher and eight (8) years of cybersecurity and/or cybersecurity risk management experience supporting medical devices.
• Experience working with embedded systems, IoT devices, Bluetooth, Wi‑Fi, and/or cellular technologies.

Responsibilities

• Leading cybersecurity assurance activities throughout the product life cycle, including risk management, threat modeling, vulnerability assessments, security architecture, SBOMs, and risk reporting.
• Ensuring regulatory compliance and elevating major issues impacting patient safety, cybersecurity, usability, or process adherence.
• Acting as a cybersecurity champion within product teams by analyzing designs for vulnerabilities and coordinating with hardware, software, design QA, and regulatory functions.
• Supporting audits, CAPA, supplier audits, and other quality processes related to cybersecurity risk management and software assurance.
• Supervising and mentoring other cybersecurity assurance engineers.

Skills

Cybersecurity risk management

Threat modeling

Vulnerability assessments

Security architecture

SBOMs

Penetration testing

Regulatory compliance

Security testing

Leadership

Education

Bachelor's degree

Tools

SAST

DAST

SBOM

STRIDE

CVSS

SCA

Job description

Thank you for your interest in joining Solventum. Solventum is a new healthcare company with a long legacy of solving big challenges that improve lives and help healthcare professionals perform at their best. At Solventum, people are at the heart of every innovation we pursue. Guided by empathy, insight, and clinical intelligence, we collaborate with the best minds in healthcare to address our customers’ toughest challenges. While we continue updating the Solventum Careers Page and applicant materials, some documents may still reflect legacy branding. Please note that all listed roles are Solventum positions, and our Privacy Policy here applies to any personal information you submit. As it was with 3M, at Solventum all qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Job Description

Principal Cybersecurity Assurance Engineer 3M Health Care is now Solventum. At Solventum, we enable better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers’ toughest challenges, we pioneer game-changing innovations at the intersection of health, material and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue. We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because at Solventum, we never stop solving for you.

Impact You’ll Make in this Role

• Leading cybersecurity assurance activities throughout the product life cycle, including creating cybersecurity risk management plans, threat modeling, performing vulnerability assessments, defining security architecture, creating SBOMs, managing vulnerabilities and cybersecurity risks, planning and monitoring security testing, including penetration testing, writing cybersecurity risk management reports, and ensuring traceability between security controls, security requirements, and security testing.
• Ensuring compliance with applicable regulatory requirements and industry standards, while immediately elevating to management any major problem that could affect patient safety, cybersecurity, customer usability, or system adherence to process requirements.
• Acting as a cybersecurity champion within product development teams by analyzing system designs for vulnerabilities, determining cyber risk profiles, estimating security risks, defining security controls, interacting with hardware and software engineers, design assurance, quality, and regulatory teams to ensure compliance with cybersecurity regulations and ATO readiness, and collaborating with other security teams to monitor and respond to cyber signals.
• Supporting continuous process improvement, external audits and submissions, the CAPA process, supplier audit processes, and other quality-related processes regarding cybersecurity risk management and software assurance.
• Supervising, mentoring, guiding, and coaching other cybersecurity assurance engineers.

Your Skills and Expertise

To set you up for success in this role from day one, Solventum requires (at a minimum) the following qualifications:

• Bachelor’s degree or higher (completed and verified prior to start) AND eight (8) years of cybersecurity and/or cybersecurity risk management experience supporting medical devices.

In addition to the above requirements, the following are also required:

• Experience working with embedded systems, Internet of Things (IoT) devices, Bluetooth, Wi-Fi, and/or cellular technologies.

Additional qualifications that could help you succeed even further in this role include:

• Ten (10) years of cybersecurity and/or cybersecurity risk management experience supporting medical devices.
• Experience applying premarket and postmarket medical device regulations and standards, such as FDA requirements, EU regulations, IEC 81001-5-1, ISO 13485, ISO 14971, IEC 62304, or similar standards.
• Experience leading and documenting threat modeling and vulnerability assessments for embedded systems, connected devices, and/or IoT ecosystems.
• Experience applying threat modeling and vulnerability assessment frameworks, such as STRIDE and CVSS.
• Experience conducting penetration testing, malformed input testing (fuzz testing), static application security testing (SAST), and/or dynamic application security testing (DAST) for embedded systems.
• Experience performing software composition analysis (SCA), software bill of materials (SBOM) generation, SBOM monitoring, and related software security activities.
• Experience applying C programming language concepts and/or cryptographic principles to support product cybersecurity activities.
• Experience communicating cybersecurity risks, technical findings, and recommendations through verbal discussions, presentations, and written communications.
• Experience managing multiple projects, priorities, and deliverables across cross-functional teams in a dynamic product development environment.
• Experience working with internal stakeholders and external business partners to support cybersecurity, compliance, and product development initiatives.

Work Information

• Work location: Remote (United States)
• Travel: May include up to 5% domestic/international
• Relocation Assistance: May be authorized
• Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).

Supporting Your Well-being

Solventum offers many programs to help you live your best life – both physically and financially. To ensure competitive pay and benefits, Solventum regularly benchmarks with other companies that are comparable in size and scope.

Applicable to US Applicants Only:
The expected compensation range for this position is $124,000 - $170,500, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate’s relevant knowledge, training, skills, work location, and/or experience.

In addition, this position may be eligible for a range of benefits (Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences and Retirement Benefits, etc.). Additional information is available at https://www.solventum.com/en-us/home/our-company/careers/#Total-Rewards.

Responsibilities of this position include that corporate policies, procedures and security standards are complied with while performing assigned duties.

Equal Opportunity

Solventum is an equal opportunity employer. Solventum will not discriminate against any applicant for employment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.

Solventum is a new healthcare company with a long legacy of solving big challenges that improve lives and help healthcare professionals perform at their best. At Solventum, people are at the heart of every innovation we pursue. Guided by empathy, insight, and clinical intelligence, we collaborate with the best minds in healthcare to address our customers’ toughest challenges. While we continue updating the Solventum Careers Page and applicant materials, some documents may still reflect legacy branding. Please note that all listed roles are Solventum positions, and our Privacy Policy here applies to any personal information you submit. As it was with 3M, at Solventum all qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. At Solventum, we create breakthrough solutions for our customers’ toughest challenges by pioneering game-changing innovations at the intersection of health, material and data science to change patients’ lives for the better – while enabling healthcare professionals to perform at their best.