CrawlJobs Logo

Principal Engineer, Product Cybersecurity

United States, Round Lake Employment contract 120000.00 - 165000.00 USD / Year · Job Posted May 04, 2026
Apply Position
Job Link Share

Job Description

This is where your work saves lives. As Senior Principal Engineer, own and direct the cybersecurity design and analysis of multiple medical devices. Demonstrate subject matter expert knowledge in state-of-the-art security principles.Resolve difficult problems, from conception to final design with team input. Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance. Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan. Utilizes solid understanding of device and system connectivity concepts in a medical device domain. Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables. Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.

Job Responsibility

  • Implement proof of concept project to define innovative solutions on platforms/server platforms
  • Lead implementation of medical device cybersecurity principles as part of an overall security architecture
  • Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted
  • Create threat models of medical device systems and the interfaces between medical devices
  • Perform vulnerability scanning of medical device systems and analyze results
  • Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions
  • Drive cybersecurity improvements through product the cross functional teams, primarily software
  • Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service)
  • Ensure compliance to the product development process and Quality System and Design Control requirements
  • Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met.

Requirements

  • BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
  • Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis
  • Experience with cybersecurity related software such as Blackduck, Coverity, etc.
  • Experience dealing with threat intelligence, CWEs and CVEs
  • Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
  • Experience with cybersecurity functionality on embedded systems and hosted software applications
  • Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
  • Ability to convince management on courses of action with minimal assistance using both written and verbal methods
  • Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

What we offer

  • Support for Parents
  • Continuing Education/ Professional Development
  • Employee Heath & Well-Being Benefits
  • Paid Time Off
  • 2 Days a Year to Volunteer
  • medical and dental coverage that start on day one
  • insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
  • Employee Stock Purchase Plan (ESPP), with the ability to purchase company stock at a discount
  • 401(k) Retirement Savings Plan (RSP), with options for employee contributions and company matching
  • Flexible Spending Accounts
  • educational assistance programs
  • time-off benefits such as paid holidays, paid time off ranging from 20 to 35 days based on length of service
  • family and medical leaves of absence
  • paid parental leave
  • commuting benefits
  • Employee Discount Program
  • Employee Assistance Program (EAP)
  • childcare benefits

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Similar Jobs for

Principal Engineer, Product Cybersecurity

8 matching positions

Principal Engineer, Product Cybersecurity

As Principal Engineer, own and direct the cybersecurity design and analysis of m...
Location
Location
United States , Round Lake
Salary
Salary:
120000.00 - 165000.00 USD / Year
https://www.baxter.com/ Logo
Baxter
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
  • Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis
  • Experience with cybersecurity related software such as Blackduck, Coverity, etc.
  • Experience dealing with threat intelligence, CWEs and CVEs
  • Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
  • Experience with cybersecurity functionality on embedded systems and hosted software applications
  • Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
  • Ability to convince management on courses of action with minimal assistance using both written and verbal methods
  • Applicants must be authorized to work for any employer in the U.S.
Job Responsibility
Job Responsibility
  • Implement proof of concept project to define innovative solutions on platforms/server platforms
  • Lead implementation of medical device cybersecurity principles as part of an overall security architecture
  • Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted
  • Create threat models of medical device systems and the interfaces between medical devices
  • Perform vulnerability scanning of medical device systems and analyze results
  • Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions
  • Drive cybersecurity improvements through product the cross functional teams, primarily software
  • Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service)
  • Ensure compliance to the product development process and Quality System and Design Control requirements
  • Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met
What we offer
What we offer
  • Support for Parents
  • Continuing Education/ Professional Development
  • Employee Heath & Well-Being Benefits
  • Paid Time Off
  • 2 Days a Year to Volunteer
  • Medical and dental coverage that start on day one
  • Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
  • Employee Stock Purchase Plan (ESPP)
  • 401(k) Retirement Savings Plan (RSP)
  • Flexible Spending Accounts
  • Fulltime
Read More
Arrow Right

Principal Engineer, Product Cybersecurity

This is where your work saves lives. As Senior Principal Engineer, own and direc...
Location
Location
United States , Round Lake
Salary
Salary:
120000.00 - 165000.00 USD / Year
https://www.baxter.com/ Logo
Baxter
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
  • Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis
  • Experience with cybersecurity related software such as Blackduck, Coverity, etc
  • Experience dealing with threat intelligence, CWEs and CVEs
  • Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc
  • Experience with cybersecurity functionality on embedded systems and hosted software applications
  • Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
  • Ability to convince management on courses of action with minimal assistance using both written and verbal methods
  • Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time
Job Responsibility
Job Responsibility
  • Implement proof of concept project to define innovative solutions on platforms/server platforms
  • Lead implementation of medical device cybersecurity principles as part of an overall security architecture
  • Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted
  • Create threat models of medical device systems and the interfaces between medical devices
  • Perform vulnerability scanning of medical device systems and analyze results
  • Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions
  • Drive cybersecurity improvements through product the cross functional teams, primarily software
  • Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service)
  • Ensure compliance to the product development process and Quality System and Design Control requirements
  • Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met
What we offer
What we offer
  • Medical and dental coverage
  • Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
  • Employee Stock Purchase Plan (ESPP)
  • 401(k) Retirement Savings Plan (RSP)
  • Flexible Spending Accounts
  • Educational assistance programs
  • Paid holidays
  • Paid time off ranging from 20 to 35 days based on length of service
  • Family and medical leaves of absence
  • Paid parental leave
  • Fulltime
Read More
Arrow Right

Principal Cybersecurity Engineer

Astrion has an exciting opportunity for a Principal Cybersecurity Engineer locat...
Location
Location
United States , Bedford, Hanscom AFB
Salary
Salary:
175000.00 - 185000.00 USD / Year
astrion.us Logo
Astrion
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Must be a US citizen
  • Must have a be able to maintain a Top Secret Level Clearance
  • BS/BA Degree
  • 15 years of experience in the respective technical/professional discipline being performed, 10 of which must be in the DoD
  • Proficieny in: Risk Management Framework (RMF), with empasis on taking projects from Step 1 to Step 5
  • Vulnerability Management, Tenable Nessus (ACAS-DoD version of Nessus)
  • STIGs
  • CISSP Certification
Job Responsibility
Job Responsibility
  • Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, Security Concepts of Operations, and other system security engineering-related documents identified in MIL-STD 1785, DoDI 5000.02, Operation of the Adaptive Acquisition Framework, and DoDI 8510.01
  • Support the system/application Authorization and Accreditation (A&A) effort to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF)
  • Update, monitor, and manage information in systems for the program office
  • Process and manage system user account requests and process tools
  • Process and manage system port/protocol and access control list requirements
  • Process and manage system Public Key Infrastructure (PKI) identification and authorization requirements
  • Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD
  • Recommend policies and procedures to ensure information systems reliability and accessibility to prevent and defend against unauthorized access to systems, networks, and data
  • Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risk, and protection needs
  • Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ vision and goals
What we offer
What we offer
  • Competitive salaries
  • Continuing education assistance
  • Professional development
  • Multiple healthcare benefits package options
  • 401K with employer matching
  • Competitive time off policy along with a federally recognized holiday schedule
Read More
Arrow Right

Sr Principal Product Security Engineer

Secure technology that saves lives. In support of our mission to save and sustai...
Location
Location
United States , Skaneateles Falls
Salary
Salary:
112000.00 - 154000.00 USD / Year
https://www.baxter.com/ Logo
Baxter
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Computer Science or a related technical field
  • 8+ years of experience working within a secure software development life cycle (SSDLC)
  • Strong understanding of application security across the full software life cycle
  • Hands‑on experience developing, reviewing, or enforcing secure coding practices
  • Familiarity with handling PHI and PII in regulated environments
  • Experience with threat modeling methodologies such as STRIDE, DREAD, LINDDUN, or PASTA
  • Proven ability to perform security risk assessments and clearly communicate risk and business impact
  • Experience analyzing, documenting, and remediating software and system vulnerabilities
  • Familiarity with industry standards and guidance including IEC TR 80001, NIST 800‑53, ISO/IEC 27001 & 27002 (preferred)
  • Expertise in designing secure networks, systems, and application architectures
Job Responsibility
Job Responsibility
  • Define and document the security architecture and cybersecurity posture of life‑critical medical products
  • Lead threat modeling, interface analysis, and secure design reviews across product lines
  • Author product security whitepapers, technical documentation, and regulatory‑facing materials
  • Develop Manufacturer Disclosure Statements for Medical Devices (MDS²) and related artifacts
  • Produce and interpret static code analysis and vulnerability assessment reports
  • Partner with development teams on security requirements and policies
  • Establish and drive governance around vulnerability management, from discovery through remediation
  • Support incident response, investigation, and recovery efforts in collaboration with cross‑functional teams
  • Use industry‑leading tools (e.g., Tenable Nessus, Fortify, Coverity) to identify, analyze, and mitigate risks
  • Monitor and assess zero‑day threats and emerging vulnerabilities
What we offer
What we offer
  • Support for Parents
  • Continuing Education/ Professional Development
  • Employee Heath & Well-Being Benefits
  • Paid Time Off
  • 2 Days a Year to Volunteer
  • Medical and dental coverage that start on day one
  • Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
  • Employee Stock Purchase Plan (ESPP)
  • 401(k) Retirement Savings Plan (RSP)
  • Flexible Spending Accounts
  • Fulltime
Read More
Arrow Right

Senior Principal Product Security Engineer

In this role, you’ll lead by example—driving secure design, influencing architec...
Location
Location
United States , Skaneateles Falls
Salary
Salary:
128000.00 - 176000.00 USD / Year
https://www.baxter.com/ Logo
Baxter
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Computer Science or a related technical field
  • 8+ years of experience working within a secure software development life cycle (SSDLC)
  • Strong understanding of application security across the full software life cycle
  • Hands‑on experience developing, reviewing, or enforcing secure coding practices
  • Familiarity with handling PHI and PII in regulated environments
  • Experience with threat modeling methodologies such as STRIDE, DREAD, LINDDUN, or PASTA
  • Proven ability to perform security risk assessments and clearly communicate risk and business impact
  • Experience analyzing, documenting, and remediating software and system vulnerabilities
  • Familiarity with industry standards and guidance including IEC TR 80001, NIST 800‑53, ISO/IEC 27001 & 27002 (preferred)
  • Expertise in designing secure networks, systems, and application architectures
Job Responsibility
Job Responsibility
  • Define and document the security architecture and cybersecurity posture of life‑critical medical products
  • Lead threat modeling, interface analysis, and secure design reviews across product lines
  • Author product security whitepapers, technical documentation, and regulatory‑facing materials
  • Develop Manufacturer Disclosure Statements for Medical Devices (MDS²) and related artifacts
  • Produce and interpret static code analysis and vulnerability assessment reports
  • Partner with development teams on security requirements and policies
  • Establish and drive governance around vulnerability management, from discovery through remediation
  • Support incident response, investigation, and recovery efforts in collaboration with cross‑functional teams
  • Use industry‑leading tools (e.g., Tenable Nessus, Fortify, Coverity) to identify, analyze, and mitigate risks
  • Monitor and assess zero‑day threats and emerging vulnerabilities
What we offer
What we offer
  • Support for Parents
  • Continuing Education/ Professional Development
  • Employee Heath & Well‑Being Benefits
  • Paid Time Off
  • 2 Days a Year to Volunteer
  • Medical and dental coverage that start on day one
  • Insurance coverage for basic life, accident, short‑term and long‑term disability, and business travel accident insurance
  • Employee Stock Purchase Plan (ESPP)
  • 401(k) Retirement Savings Plan (RSP)
  • Flexible Spending Accounts
  • Fulltime
Read More
Arrow Right

Senior Principal Product Security Engineer

Secure technology that saves lives. In support of our mission to save and sustai...
Location
Location
United States , Skaneateles Falls; Raleigh; Chicago; Bellevue; Milwaukee
Salary
Salary:
128000.00 - 176000.00 USD / Year
https://www.baxter.com/ Logo
Baxter
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Computer Science or a related technical field
  • 8+ years of experience working within a secure software development life cycle (SSDLC)
  • Strong understanding of application security across the full software life cycle
  • Hands‑on experience developing, reviewing, or enforcing secure coding practices
  • Familiarity with handling PHI and PII in regulated environments
  • Experience with threat modeling methodologies such as STRIDE, DREAD, LINDDUN, or PASTA
  • Proven ability to perform security risk assessments and clearly communicate risk and business impact
  • Experience analyzing, documenting, and remediating software and system vulnerabilities
  • Familiarity with industry standards and guidance including IEC TR 80001, NIST 800‑53, ISO/IEC 27001 & 27002 (preferred)
  • Expertise in designing secure networks, systems, and application architectures
Job Responsibility
Job Responsibility
  • Define and document the security architecture and cybersecurity posture of life‑critical medical products
  • Lead threat modeling, interface analysis, and secure design reviews across product lines
  • Author product security whitepapers, technical documentation, and regulatory‑facing materials
  • Develop Manufacturer Disclosure Statements for Medical Devices (MDS²) and related artifacts
  • Produce and interpret static code analysis and vulnerability assessment reports
  • Partner with development teams on security requirements and policies
  • Establish and drive governance around vulnerability management, from discovery through remediation
  • Support incident response, investigation, and recovery efforts in collaboration with cross‑functional teams
  • Use industry‑leading tools (e.g., Tenable Nessus, Fortify, Coverity) to identify, analyze, and mitigate risks
  • Monitor and assess zero‑day threats and emerging vulnerabilities
What we offer
What we offer
  • Support for Parents
  • Continuing Education/ Professional Development
  • Employee Heath & Well-Being Benefits
  • Paid Time Off
  • 2 Days a Year to Volunteer
  • Medical and dental coverage that start on day one
  • Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
  • Employee Stock Purchase Plan (ESPP)
  • 401(k) Retirement Savings Plan (RSP)
  • Flexible Spending Accounts
  • Fulltime
Read More
Arrow Right

Senior Principal Product Security Engineer

In this role, you’ll lead by example—driving secure design, influencing architec...
Location
Location
United States , Skaneateles Falls; Raleigh; Chicago; Bellevue; Milwaukee
Salary
Salary:
128000.00 - 176000.00 USD / Year
https://www.baxter.com/ Logo
Baxter
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Computer Science or a related technical field
  • 8+ years of experience working within a secure software development life cycle (SSDLC)
  • Strong understanding of application security across the full software life cycle
  • Hands‑on experience developing, reviewing, or enforcing secure coding practices
  • Familiarity with handling PHI and PII in regulated environments
  • Experience with threat modeling methodologies such as STRIDE, DREAD, LINDDUN, or PASTA
  • Proven ability to perform security risk assessments and clearly communicate risk and business impact
  • Experience analyzing, documenting, and remediating software and system vulnerabilities
  • Familiarity with industry standards and guidance including IEC TR 80001, NIST 800‑53, ISO/IEC 27001 & 27002 (preferred)
  • Expertise in designing secure networks, systems, and application architectures
Job Responsibility
Job Responsibility
  • Define and document the security architecture and cybersecurity posture of life‑critical medical products
  • Lead threat modeling, interface analysis, and secure design reviews across product lines
  • Author product security whitepapers, technical documentation, and regulatory‑facing materials
  • Develop Manufacturer Disclosure Statements for Medical Devices (MDS²) and related artifacts
  • Produce and interpret static code analysis and vulnerability assessment reports
  • Partner with development teams on security requirements and policies
  • Establish and drive governance around vulnerability management, from discovery through remediation
  • Support incident response, investigation, and recovery efforts in collaboration with cross‑functional teams
  • Use industry‑leading tools (e.g., Tenable Nessus, Fortify, Coverity) to identify, analyze, and mitigate risks
  • Monitor and assess zero‑day threats and emerging vulnerabilities
What we offer
What we offer
  • Support for Parents
  • Continuing Education/ Professional Development
  • Employee Heath & Well-Being Benefits
  • Paid Time Off
  • 2 Days a Year to Volunteer
  • Medical and dental coverage that start on day one
  • Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
  • Employee Stock Purchase Plan (ESPP)
  • 401(k) Retirement Savings Plan (RSP)
  • Flexible Spending Accounts
  • Fulltime
Read More
Arrow Right

Principal Product Security Engineer

Do you thrive at the intersection of cybersecurity and AI, with a passion for se...
Location
Location
Australia
Salary
Salary:
Not provided
https://www.atlassian.com Logo
Atlassian
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Hands-on experience securing AI/ML systems, including models, data pipelines, and inference services
  • Experience in cloud security architecture and infrastructure for AI/ML workloads
  • Experience coding in Java, Javascript, Python, or Go, and at least one scripting language
  • Experience leading large-scale projects from start to finish
  • Adept experience providing SME knowledge and guidance to stakeholders and engineering functions
  • Proven experience in a technical leadership role within product security, with 2+ years of experience
  • Deep understanding of cybersecurity principles, threat landscape, and best practices
  • Strong knowledge of data security, privacy, encryption, and authentication methods
  • Experience with compliance standards such as ISO 27001, SOC 2, FedRAMP, or similar
  • Excellent leadership, communication, and interpersonal skills
Job Responsibility
Job Responsibility
  • Serve as the Technical SME, promoting automation, reviewing platform and service designs and architectures, and driving our security teams to equip the engineering partner teams with the latest tools, techniques, and methodologies to enhance AI security
  • Lead the charge in safeguarding our AI platforms and product experiences
  • Partnering across engineering, platform, infrastructure and privacy to foster a culture of secure and trustworthy AI that meets the highest industry standards
What we offer
What we offer
  • Health and wellbeing resources
  • Paid volunteer days
Read More
Arrow Right