Senior DevSecOps Security Engineer - Medical Devices

Boston Scientific; Maple Grove (MN); Hybrid; USD 85,000 - 162,000; Full time

Job summary

Boston Scientific is seeking a Senior Cybersecurity Engineer to lead DevSecOps initiatives across our Interventional Cardiology product lines. You will embed security throughout the product lifecycle, perform threat modeling, and drive risk assessments in a regulated medical device environment.

The role requires collaboration with Software Development, Quality, Regulatory, and IT teams to ensure compliance with FDA guidance and industry standards while maintaining robust security controls in

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or a related field.
• Minimum 5 years of experience in cybersecurity engineering, with a focus on product security for IoT/cloud.
• Knowledge of DevSecOps tools and secure development practices.
• Proven experience in design and architecture reviews for embedded medical devices or similar tech.
• Experience with security risk assessments and mitigations.

Responsibilities

• Integrate security into the product development lifecycle across multiple product lines.
• Lead threat modeling using STRIDE and perform security risk assessments.
• Embed security controls throughout the CI/CD pipeline with product teams.
• Develop and maintain risk management documentation and incident response plans.
• Collaborate with Regulatory, IT, Quality and Software teams to align security goals.

Skills

DevSecOps

Cybersecurity

Threat modeling

NIST CSF

Secure SDLC

CI/CD security

Communication

Education

Bachelor's or Master's in Cybersecurity/CS/Engineering

Tools

DevSecOps tools

Vulnerability scanning tools

Penetration testing tools

Job description

Boston Scientific is seeking a Senior Cybersecurity Engineer to lead DevSecOps initiatives across our Interventional Cardiology product lines. You will embed security throughout the product lifecycle, perform threat modeling, and drive risk assessments in a regulated medical device environment.

The role requires collaboration with Software Development, Quality, Regulatory, and IT teams to ensure compliance with FDA guidance and industry standards while maintaining robust security controls in