Senior Software Engineer, Product Security

Baxter Healthcare; Round Lake (IL); Hybrid; USD 104,000 - 143,000; Full time

Benefits offered by this job

Flexible workplace policy

Comprehensive benefits

Job summary

Baxter is seeking a Senior Software Engineer to own the cybersecurity design and analysis of multiple medical devices, guiding from concept through final design with the team.

You will define requirements, create threat models, perform vulnerability assessments, and ensure regulatory and design-control compliance while collaborating with Engineering, Risk, and Regulatory teams. The role supports a flexible workplace with at least three days onsite per week in Round Lake, IL.

Qualifications

• Experience with threat modeling, pentesting, fuzz testing, and vulnerability scanning.
• Familiarity with security software such as Blackduck and Coverity.
• Experience with threat intelligence and CWEs/CVEs.
• Some experience securing embedded systems and hosted apps.
• Strong written and verbal communication across technical teams.

Responsibilities

• Define and lead proof of concept projects for security on medical device platforms.
• Create system requirements, architectures, and risk analyses for cybersecurity.
• Develop threat models for medical device systems and interfaces.
• Perform vulnerability scans and analyze results.
• Monitor threat intelligence and CWEs/CVEs; propose mitigations.
• Drive cybersecurity improvements with cross-functional teams.
• Lead discussions to resolve constraints across Engineering, Risk, Regulatory, etc.
• Ensure compliance with product development, Quality System, and Design Controls.

Skills

Threat modeling

Penetration testing

Fuzz testing

Vulnerability scanning

Secure code analysis

CWEs/CVEs awareness

Embedded systems security

Communication skills

Education

BS in computer science or related field

Masters with 1+ years

Tools

Blackduck

Coverity

Job description

This is whereyour work makes a difference.

At Baxter, we believe every person- regardless of who they are or where they are from- deserves a chance to live a healthy life. It was our founding belief in 1931 and continues to be our guiding principle. We are redefining healthcare delivery to make a greater impact today, tomorrow, and beyond.

Our Baxter colleagues are united by our Mission to Save and Sustain Lives. Together, our community is driven by a culture of courage, trust, and collaboration. Every individual is empowered to take ownership and make a meaningful impact. We strive for efficient and effective operations, and we hold each other accountable for delivering exceptional results.

Here, you will find more than just a job—you will find purpose and pride.

Job Description

Your Role at Baxter

This is where your work saves lives.

As Senior Software Engineer, own and direct the cybersecurity design and analysis of multiple medical devices. Demonstrate subject matter expert knowledge in state-of-the-art security principles. Resolve difficult problems, from conception to final design with team input. Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance.

Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan. Utilizes solid understanding of device and system connectivity concepts in a medical device domain. Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables. Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.

What you'll be doing:

• Implement proof of concept project to define innovative solutions on platforms/server platforms. Lead implementation of medical device cybersecurity principles as part of an overall security architecture.
• Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted.
• Create threat models of medical device systems and the interfaces between medical devices.
• Perform vulnerability scanning of medical device systems and analyze results.
• Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions.
• Drive cybersecurity improvements through product the cross functional teams, primarily software.
• Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service).
• Ensure compliance to the product development process and Quality System and Design Control requirements. Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met.

What you'll bring

• BS in computer science, engineering, mathematics, information management, or related field with 3+ years of industry experience or Masters with 1+ years.
• Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis.
• Experience with cybersecurity related software such as Blackduck, Coverity, etc preferred.
• Experience dealing with threat intelligence, CWEs and CVEs preferred.
• Some experience with cybersecurity functionality on embedded systems and hosted software applications.
• Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel.

Baxter is committed to supporting the needs for flexibility in the workplace. We do so through our flexible workplace policy which includes a minimum of 3 days a week onsite. This policy provides the benefits of connecting and collaborating in-person in support of our Mission.

We understand compensation is an important factor as you consider the next step in your career. At Baxter, we are committed to equitable pay for all employees, and we strive to be more transparent with our pay practices. The estimated base salary for this position is $104,000 to $143,000 annually. The estimated range is meant to reflect an anticipated salary range for the position. We may pay more or less than of the anticipated range based upon market data and other factors, all of which are subject to change. Individual pay is based upon location, skills and expertise, experience, and other relevant factors. This position may also be eligible for discretionary bonuses.

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

#LI-MS1

US Benefits at Baxter (except for Puerto Rico)

This is where your well-being matters. Baxter offers comprehensive compensation and benefits packages for eligible roles. Our health and well-being benefits include medical and dental coverage that start on day one, as well as insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance. Financial and retirement benefits include the Employee Stock Purchase Plan (ESPP), with the ability to purchase company stock at a discount, and the 401(k) Retirement Savings Plan (RSP), with options for employee contributions and company matching. We also offer Flexible Spending Accounts, educational assistance programs, and time-off benefits such as paid holidays, paid time off ranging from 20 to 35 days based on length of service, family and medical leaves of absence, and paid parental leave. Additional benefits include commuting benefits, the Employee Discount Program, the Employee Assistance Program (EAP), and childcare benefits. Join us and enjoy the competitive compensation and benefits we offer to our employees.

Equal Employment Opportunity

Baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

25212 W Illinois Route 120 RL/Plastics|Round Lake, IL 60073|United States of America