Remote Surgical Cybersecurity Architect (Medical Devices)

Bausch & Lomb GmbH; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

Bausch + Lomb Surgical R&D is seeking a cybersecurity leader to embed secure-by-design practices across the lifecycle of surgical capital equipment. You will coordinate with engineering, quality, regulatory, and corporate security teams to drive resilient, compliant security outcomes in a regulated medical device environment.

Responsibilities include leading vulnerability management, architecture guidance, security testing, and SBOM processes, with a focus on cross-functional collaboration

Qualifications

• Bachelor's degree in Engineering, CS, Cybersecurity or related field.
• 7+ years in product security, application security, medical device cybersecurity, or software security within a regulated environment.
• Experience supporting or leading cybersecurity activities for medical device or other regulated product development.
• Strong communication, collaboration, stakeholder management, and problem-solving skills.
• Ability to translate technical cybersecurity risks into clear, actionable guidance for engineering, quality, and regulatory stakeholders.

Responsibilities

• Architect and implement a consistent cybersecurity strategy across surgical capital equipment product lines to establish a scalable and secure product ecosystem.
• Embed secure-by-design principles throughout the product lifecycle, providing guidance on secure architecture, threat modeling, design controls, cryptography, and secure communication protocols.
• Lead execution of cybersecurity requirements across development programs, ensuring alignment with regulatory expectations, corporate standards, and product quality objectives.
• Coordinate vulnerability management activities, including intake, triage, risk assessment, remediation tracking, and documentation of product security issues through closure.
• Serve as the Surgical R&D cybersecurity representative for vulnerability disclosure and incident response activities, supporting investigations, impact assessments, root cause analyses, and remediation efforts.
• Partner with engineering teams to implement security testing practices, including SAST, DAST, SCA, penetration testing, and automated security controls within development pipelines.
• Support supplier and third-party security initiatives by defining security requirements, managing software supply chain risks, and maintaining Software Bill of Materials (SBOM) processes.
• Collaborate with Quality, Regulatory Affairs, IT, and Corporate Product Security teams to ensure compliance with evolving cybersecurity regulations and industry standards while enabling efficient product delivery.

Skills

Cybersecurity strategy

Threat modeling

Vulnerability management

Secure software development

Cross-functional collaboration

Security testing

Education

Bachelor's degree in Engineering/CS/Cybersecurity

Tools

SAST

DAST

SCA

Penetration testing

SBOM management

Job description

Bausch + Lomb Surgical R&D is seeking a cybersecurity leader to embed secure-by-design practices across the lifecycle of surgical capital equipment. You will coordinate with engineering, quality, regulatory, and corporate security teams to drive resilient, compliant security outcomes in a regulated medical device environment.

Responsibilities include leading vulnerability management, architecture guidance, security testing, and SBOM processes, with a focus on cross-functional collaboration