Staff Cyber Security Engineer

Abbott; United States; Hybrid; USD 114,000 - 228,000; Full time

Benefits offered by this job

Medical coverage

Retirement plan

Tuition reimbursement

Job summary

Abbott is seeking a Staff Cyber Security Engineer for the Cardiac Rhythm Management division, based in Sylmar, CA or remote. The role leads cybersecurity for medical devices, collaborating with R&D and IT to identify risks and implement balanced solutions.

You will develop security plans, interact with researchers, and communicate effectively with customers and regulators, ensuring robust device security across the lifecycle.

Qualifications

• Bachelor’s in engineering or sciences is required.
• BS/ MS degrees specified with years of experience.
• Experience with core cybersecurity responsibilities in two or more areas.

Responsibilities

• Lead product manufacturing cybersecurity activities from incident response to vulnerability assessments.
• Develop manufacturing intrusion detection capabilities.
• Lead manufacturing risk assessments and suggest security controls for embedded environments.
• Create and test manufacturing security requirements and processes.
• Evaluate security risks across development life cycles and post-market products.
• Manage security deliverables for regulatory bodies and standards.

Skills

C/C++

Cloud security

Network security

Mobile security

Linux/Windows

Education

Bachelor's in engineering or sciences

MS in engineering or sciences

Job description

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 115,000 colleagues serve people in more than 160 countries.

JOB DESCRIPTION:

About Abbott

Abbott is a global healthcare leader, creating breakthrough science to improve people’s health. We’re always looking towards the future, anticipating changes in medical science and technology.

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You’ll also have

• Career development with an international company where you can grow the career you dream of.
• Free medical coverage for employees* via the Health Investment Plan (HIP) PPO
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement, the Freedom 2 Savestudent debt program and FreeU education benefit - an affordable andconvenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

This position works out of our Sylmar, CA location or Remote in the Cardiac Rhythm Management division. As a global leader in Cardiac Rhythm Technologies, we focus on innovative technologies that can improve the way doctors treat people with heart arrhythmias, or irregular heartbeats.

As the Staff Cyber Security Engineer, you’ll Be on the front lines of the emerging area of medical device cybersecurity manufacturing as an integral member and technical leader within a team responsible for creating, deploying, and monitoring cybersecurity and information security solutions for medical devices. Interact with external and internal cybersecurity researchers to identify and remediate vulnerabilities within products and manufacturing systems. Work directly with R&D and Information Technology teams to ensure all relevant security risks are identified and evaluated, and appropriate and well-balanced solutions are implemented. Develop project security management deliverables for regulatory bodies to comply with standards/guidance documents, create and implement plans to address new standards/guidance, and successfully communicate cybersecurity technology to customers, regulatory bodies, and other stakeholders.

What You’ll Work On

• Lead and perform product manufacturing cybersecurity-related activities ranging from incident response to vulnerabilityassessments to mitigation implementation.
• Develop and perform manufacturing intrusion detection activities.
• Lead manufacturing risk assessments in conjunction with product R&D teams and develop and recommend specific securitycontrols for product/system wide security needs. Ensure recommended security controls are feasible forembedded/constrained environments, including prototyping where appropriate.
• Participate in the creation and testing of product manufacturing security-related requirements and processes.
• Evaluate and test security risks on programs across the entire development life cycle, including market-released product.
• Manage security-related deliverables for regulatory bodies, ensuring compliance with key standards / guidance documents.
• Work with third party manufacturers to ensure appropriate manufacturing cybersecurity processes are in place.
• Contribute to the understanding of current industry best practices and how they can be applied to the CRM Products.
• Develop advanced technical ideas and guide their development into final product.
• Execute/ Assist activities to sustain/ develop internal and external partner security testing capabilities in alignment with testingstrategies.
• Maintain a high level of technical knowledge on security.
• Champion consistent implementation of the Security Development Life cycle across projects
• Responsibilities may include the following and other duties may be assigned:
• Designs, develops, tests, debugs and implements software and software tools.
• Determines systems software design requirements.
• Ensures that system improvements are successfully implemented and monitored to increase efficiency.
• Generates systems software engineering policies, standards and procedures.

Required Qualifications

• Bachelor’s in engineering or sciences
• 7+ years of related experience with BS Degree in Engineering or Sciences
• 5+ years of related experience with MS Degree in Engineering or Sciences
• Experience as an analyst, engineer, developer, or architect with core cybersecurity responsibility and knowledge in two or more of the following areas:
• IoT (embedded) devices and systems
• Cloud systems architecture and security
• Enterprise and local network infrastructure security
• Large-scale application architecture and security
• Mobile device application architecture and security
• Programming skills in one or more of the following: C, C++, Python, Java, .NET, Python, Go, Ruby, Scalaand/or Bash.
• OS systems-level experience within one or more of the following: Linux, Windows, Android, iOS

Preferred Qualifications

• Medical device manufacturing experience
• CISSP Certification
• Security incident management experience
• PKI Key management
• Token based authentication systems
• Medical device technology
• Understanding of information security practices, risk management processes, cybersecurity principles, and incident responsemethodologies
• Ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies
• Leadership and collaboration skills with ability to communicate complexity in a clear manner with internal and externalstakeholders

The base pay for this position is

$114,000.00 – $228,000.00

In specific locations, the pay range may vary from the range posted.

JOB FAMILY:

Product Development

DIVISION:

CRM Cardiac Rhythm Management

LOCATION:

United States > Sylmar : 13150 Telfair Avenue

WORK SHIFT:

Standard

TRAVEL:

No

MEDICAL SURVEILLANCE:

No

SIGNIFICANT WORK ACTIVITIES:

Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day), Keyboard use (greater or equal to 50% of the workday)

Abbott is an Equal Opportunity Employer of Minorities/Women/Individuals with Disabilities/Protected Veterans.

EEO is the Law link - English: http://webstorage.abbott.com/common/External/EEO_English.pdf

EEO is the Law link - Espanol: http://webstorage.abbott.com/common/External/EEO_Spanish.pdf