Senior Principal Engineer, Medical Device Cybersecurity

Baxter; Round Lake Beach (IL); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Onsite 3 days/wk

Health benefits

401(k) plan

Employee stock purchase plan

Job summary

Baxter is seeking a Principal Engineer to own and direct the cybersecurity design and analysis of multiple medical devices, applying state-of-the-art security principles. You will lead threat modeling, vulnerability scanning, and risk analysis, collaborating with Engineering, Regulatory, Clinical, and Compliance teams to ensure robust cybersecurity across embedded and hosted software.

This role is onsite with a minimum of 3 days per week on campus in the U.S., and offers competitive pay, broad

Qualifications

• BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years.
• Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis.
• Experience with cybersecurity related software such as Blackduck, Coverity, etc.
• Experience dealing with threat intelligence, CWEs and CVEs.
• Familiarity with cybersecurity organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
• Experience with cybersecurity functionality on embedded systems and hosted software applications.
• Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel.

Responsibilities

• Implement proof of concept projects to define innovative solutions on platforms/server platforms.
• Lead implementation of medical device cybersecurity principles as part of an overall security architecture.
• Create, own, and maintain system requirements, architectures, risk analyses and other specifications defining cybersecurity functionality.
• Create threat models of medical device systems and interfaces.
• Perform vulnerability scanning and analyze results.
• Monitor threat intelligence and analyze CWEs and CVEs affecting medical devices.
• Drive cybersecurity improvements through cross-functional teams, primarily software.
• Lead discussions to resolve competing constraints between Engineering, Risk Management, Compliance, Clinical, and Regulatory teams.

Skills

Threat modeling

Penetration testing

Vulnerability scanning

Secure code analysis

Cross-functional leadership

Education

BS in Computer Science or related field

Masters in related field

Tools

Black Duck

Coverity

Job description

Baxter is seeking a Principal Engineer to own and direct the cybersecurity design and analysis of multiple medical devices, applying state-of-the-art security principles. You will lead threat modeling, vulnerability scanning, and risk analysis, collaborating with Engineering, Regulatory, Clinical, and Compliance teams to ensure robust cybersecurity across embedded and hosted software.

This role is onsite with a minimum of 3 days per week on campus in the U.S., and offers competitive pay, broad