Principal DevSecOps Cybersecurity Leader

Boston Scientific; Maple Grove (MN); Hybrid; USD 102,000 - 194,000; Full time

Job summary

Boston Scientific in Maple Grove, MN is seeking a Principal Cybersecurity Engineer with a DevSecOps focus to drive security across the product lifecycle in a regulated environment.

You will lead threat modeling, embed security in CI/CD, and collaborate with Software Development, Quality, Regulatory, and IT to ensure compliant, robust medical devices. Relocation assistance may be available; this hybrid/onsite role requires three days on site weekly in our Maple Grove office.

Qualifications

• Bachelor’s or master’s degree in Cybersecurity, Computer Science, Computer Engineering, or a related field.
• 5+ years of experience in cybersecurity engineering, with a recent focus on product security as it extends to the IoT cloud.
• Knowledge of DevSecOps tools.
• Proven experience in design and architecture reviews for complex, embedded medical devices or similar technologies.
• Demonstrated history of creating and executing security risk assessments and mitigation strategies.
• In-depth understanding of cybersecurity frameworks (e.g., NIST Cybersecurity Framework) including best practices for defense in depth.
• Excellent written and verbal communication skills for interfacing technical teams, stakeholders, and executive leadership.
• Ability to work collaboratively across multidisciplinary teams, bridging gaps between technical, regulatory, and business functions.

Responsibilities

• Integrate security into the product development lifecycle across multiple product lines.
• Foster a collaborative security culture from conception to decommission.
• Embed security controls throughout the CI/CD pipeline.
• Lead threat modeling using STRIDE and risk assessments.
• Define security requirements and verification strategies.
• Establish best practices and automate vulnerability detection and patching.
• Oversee incident response plans and risk management documentation.
• Stay current with medical device cybersecurity regulations.

Skills

Cybersecurity engineering

DevSecOps

Security risk assessments

NIST CSF

Embedded medical device security

Communication skills

Cross-functional collaboration

Education

Bachelor’s or Master’s degree in Cybersecurity/CS/CE

Tools

CI/CD security tools

Job description

Boston Scientific in Maple Grove, MN is seeking a Principal Cybersecurity Engineer with a DevSecOps focus to drive security across the product lifecycle in a regulated environment.

You will lead threat modeling, embed security in CI/CD, and collaborate with Software Development, Quality, Regulatory, and IT to ensure compliant, robust medical devices. Relocation assistance may be available; this hybrid/onsite role requires three days on site weekly in our Maple Grove office.