Senior Cybersecurity Engineer: DevSecOps for Medical Devices

Boston Scientific; Arden Hills (MN); Hybrid; USD 85,000 - 162,000; Full time

Benefits offered by this job

Hybrid work model

Relocation assistance

Job summary

Boston Scientific is seeking a Senior Cybersecurity Engineer with DevSecOps expertise to drive security across its product lifecycle, including IoT cloud integration. You will lead threat modeling, risk assessments, and embedding security into CI/CD processes while collaborating with Regulatory, IT, and Quality teams.

The role emphasizes compliance with FDA guidance and defense-in-depth practices within a regulated medical device context, with a hybrid/onsite work model in Maple Grove, MN.

Qualifications

• Bachelor’s or master's degree in Cybersecurity, Computer Science, Computer Engineering, or related field.
• 5+ years in cybersecurity engineering with product security, including IoT cloud relevance.
• Knowledge of DevSecOps tools and security risk assessments.
• Experience with NIST or similar cybersecurity frameworks and defense in depth.
• Excellent written and verbal communication for cross-functional teams.

Responsibilities

• Integrate security into product development lifecycle across multiple product lines.
• Lead threat modeling and risk assessments for security strategies.
• Embed security controls in CI/CD pipelines with collaboration across teams.
• Automate vulnerability detection, secure coding, and patch management.
• Maintain incident response plans and risk management documentation.

Skills

DevSecOps

Security design

Threat modeling

CI/CD security

Regulatory compliance

Education

Bachelor’s or Master’s degree in Cybersecurity

Tools

Azure

AWS

Yocto

Linux

Active Directory / SSO

Job description

Boston Scientific is seeking a Senior Cybersecurity Engineer with DevSecOps expertise to drive security across its product lifecycle, including IoT cloud integration. You will lead threat modeling, risk assessments, and embedding security into CI/CD processes while collaborating with Regulatory, IT, and Quality teams.

The role emphasizes compliance with FDA guidance and defense-in-depth practices within a regulated medical device context, with a hybrid/onsite work model in Maple Grove, MN.