Senior DevSecOps Cybersecurity Engineer (Medical Devices)

Boston Scientific Gruppe; Maple Grove (MN); Hybrid; USD 85,000 - 162,000; Full time

Job summary

Boston Scientific seeks a Senior Cybersecurity Engineer with DevSecOps expertise to drive security across the product lifecycle. This role supports the Interventional Cardiology group in a hybrid/onsite Maple Grove, MN setting.

You will embed security into CI/CD, lead STRIDE threat modeling, manage risk, and align with regulatory guidance to protect IoT/cloud products. Strong collaboration is essential.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, CS, or related field.
• 5+ years in cybersecurity engineering with product security focus for IoT/cloud.
• Experience with DevSecOps tools and secure design reviews.
• Knowledge of NIST CSF and defense in depth best practices.

Responsibilities

• Integrate security into the product development lifecycle across multiple product lines.
• Foster a collaborative security culture from conception to decommission.
• Embed security controls in the CI/CD pipeline with product teams.
• Lead threat modeling using STRIDE and conduct security risk assessments.
• Define product security requirements, design specs, and validation strategies.
• Establish best practices and automate vulnerability detection and patching.
• Maintain risk management documentation and mitigation strategies.
• Oversee incident response plans and security incident handling.
• Manage secrets, IAM, and least-privilege access.
• Stay updated on medical device security regulations (FDA guidance, etc.).
• Collaborate with IT, Regulatory, Quality, and Software Development teams.
• Present topics to Security Champions program.

Skills

DevSecOps

Threat modeling

CI/CD security

Risk assessment

NIST CSF

Security architecture

Stakeholder communication

Regulatory knowledge

Education

Bachelor's or Master's in Cybersecurity

Tools

Azure

AWS

CI/CD tooling

Job description

Boston Scientific seeks a Senior Cybersecurity Engineer with DevSecOps expertise to drive security across the product lifecycle. This role supports the Interventional Cardiology group in a hybrid/onsite Maple Grove, MN setting.

You will embed security into CI/CD, lead STRIDE threat modeling, manage risk, and align with regulatory guidance to protect IoT/cloud products. Strong collaboration is essential.