Staff Cyber Security Engineer

Abbott Laboratories; Los Angeles (CA); On-site; USD 114,000 - 228,000; Full time

Job summary

Abbott in Sylmar, CA is seeking a Staff Cyber Security Engineer to lead cybersecurity for cardiac rhythm management manufacturing. You will interact with R&D and IT to identify risks and implement balanced security solutions across medical devices and manufacturing systems.

You will develop security management deliverables for regulatory bodies, coordinate with external researchers, and influence security across products and facilities.

Qualifications

• Bachelor’s in engineering or sciences.
• 7+ years of related experience with BS Degree in Engineering or Sciences.
• 5+ years of related experience with MS Degree in Engineering or Sciences.
• Experience as an analyst, engineer, developer, or architect with core cybersecurity responsibility and knowledge in two or more areas listed.
• Knowledge of IoT (embedded) devices, cloud, enterprise/local network security, large-scale application security, and mobile device security.

Responsibilities

• Lead and perform product manufacturing cybersecurity activities from incident response to vulnerability assessments and mitigations.
• Develop and perform manufacturing intrusion detection activities.
• Lead manufacturing risk assessments with product R&D and recommend security controls for embedded environments.
• Design, develop, test, debug and implement software and tools; ensure systems improvements are implemented and monitored.

Skills

IoT security

Cloud security

Network security

Application security

Programming (C/C++, Python, Java)

OS security (Linux/Windows/Android/iOS

Education

BS in Engineering or Sciences

MS in Engineering or Sciences

Tools

C

C++

Python

Java

.NET

Go

Ruby

Bash

Job description

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.

About Abbott

Abbott is a global healthcare leader, creating breakthrough science to improve people’s health. We’re always looking towards the future,
anticipating changes in medical science and technology.

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You’ll also have
access to:

• Career development with an international company where you can grow the career you dream of.
• Free medical coverage for employees* via the Health Investment Plan (HIP) PPO
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement, the Freedom 2 Savestudent debt program and FreeU education benefit - an affordable andconvenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

This position works out of our Sylmar, CA location in the Cardiac Rhythm Management division.
As a global leader in Cardiac Rhythm Technologies, we focus on innovative technologies that can improve the way doctors treat people with
heart arrhythmias, or irregular heartbeats.

As the Staff Cyber Security Engineer, you’ll Be on the front lines of the emerging area of medical device cybersecurity manufacturing as an
integral member and technical leader within a team responsible for creating, deploying, and monitoring cybersecurity and information security
solutions for medical devices. Interact with external and internal cybersecurity researchers to identify and remediate vulnerabilities within
products and manufacturing systems. Work directly with R&D and Information Technology teams to ensure all relevant security risks are
identified and evaluated, and appropriate and well-balanced solutions are implemented. Develop project security management deliverables for regulatory bodies to comply with standards/guidance documents, create and implement plans to address new standards/guidance, and
successfully communicate cybersecurity technology to customers, regulatory bodies, and other stakeholders.

What You’ll Work On

Lead and perform product manufacturing cybersecurity-related activities ranging from incident response to vulnerabilityassessments to mitigation implementation.
Develop and perform manufacturing intrusion detection activities.
Lead manufacturing risk assessments in conjunction with product R&D teams and develop and recommend specific securitycontrols for product/system wide security needs. Ensure recommended security controls are feasible forembedded/constrained environments, including prototyping where appropriate.

• Participate in the creation and testing of product manufacturing security-related requirements and processes.
• Evaluate and test security risks on programs across the entire development life cycle, including market-released product.
• Manage security-related deliverables for regulatory bodies, ensuring compliance with key standards / guidance documents.
• Work with third party manufacturers to ensure appropriate manufacturing cybersecurity processes are in place.
• Contribute to the understanding of current industry best practices and how they can be applied to the CRM Products.
• Develop advanced technical ideas and guide their development into final product.
• Execute/ Assist activities to sustain/ develop internal and external partner security testing capabilities in alignment with testingstrategies.
• Maintain a high level of technical knowledge on security.
• Champion consistent implementation of the Security Development Life cycle across projects

Responsibilities may include the following and other duties may be assigned:

• Designs, develops, tests, debugs and implements software and software tools.
• Determines systems software design requirements.
• Ensures that system improvements are successfully implemented and monitored to increase efficiency.
• Generates systems software engineering policies, standards and procedures.

Required Qualifications

• Bachelor’s in engineering or sciences

Required Qualifications

• 7+ years of related experience with BS Degree in Engineering or Sciences
• 5+ years of related experience with MS Degree in Engineering or Sciences
• Experience as an analyst, engineer, developer, or architect with core cybersecurity responsibility and knowledge in two or more of the following areas:
  ○ IoT (embedded) devices and systems
  ○ Cloud systems architecture and security
  ○ Enterprise and local network infrastructure security
  ○ Large-scale application architecture and security
  ○ Mobile device application architecture and security
  ○ Programming skills in one or more of the following: C, C++, Python, Java, .NET, Python, Go, Ruby, Scalaand/or Bash.
  ○ OS systems-level experience within one or more of the following: Linux, Windows, Android, iOS

Preferred Qualifications

• Medical device manufacturing experience
• CISSP Certification
• Security incident management experience
• PKI Key management
• Token based authentication systems
• Medical device technology
• Understanding of information security practices, risk management processes, cybersecurity principles, and incident responsemethodologies
• Ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies
• Leadership and collaboration skills with ability to communicate complexity in a clear manner with internal and externalstakeholders

The base pay for this position is $114,000.00 – $228,000.00. In specific locations, the pay range may vary from the range posted.