Principal Engineer, Product Cybersecurity, Baxter

Baxter

Location:
United States, Round Lake ▼
Chicago

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

112000.00 - 154000.00 USD / Year

Save Job

Apply Position

Job Description:

As Principal Engineer, own and direct the cybersecurity design and analysis of multiple medical devices. Demonstrate subject matter expert knowledge in state-of-the-art security principles. Resolve difficult problems, from conception to final design with team input. Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance. Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan. Utilizes solid understanding of device and system connectivity concepts in a medical device domain. Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables. Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.

Job Responsibility:

Implement proof of concept project to define innovative solutions on platforms/server platforms
Lead implementation of medical device cybersecurity principles as part of an overall security architecture
Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted
Create threat models of medical device systems and the interfaces between medical devices
Perform vulnerability scanning of medical device systems and analyze results
Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions
Drive cybersecurity improvements through the cross functional teams, primarily software
Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service)
Ensure compliance to the product development process and Quality System and Design Control requirements
Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met
Contribute to external communications (bulletins, FAQs, etc.) related to cybersecurity.

Requirements:

BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis
Experience with cybersecurity related software such as Blackduck, Coverity, etc.
Experience dealing with threat intelligence, CWEs and CVEs
Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
Experience with cybersecurity functionality on embedded systems and hosted software applications
Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
Ability to convince management on courses of action with minimal assistance using both written and verbal methods
Must be able to provide solutions that reflect understanding business objectives.

What we offer:

Support for Parents
Continuing Education/Professional Development
Employee Health & Well-Being Benefits
Paid Time Off
2 Days a Year to Volunteer
Medical and dental coverage
Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
Employee Stock Purchase Plan (ESPP)
401(k) Retirement Savings Plan
Flexible Spending Accounts
Educational assistance programs
Paid holidays
Paid time off ranging from 20 to 35 days based on length of service
Family and medical leaves of absence
Paid parental leave
Commuting benefits
Employee Discount Program
Employee Assistance Program (EAP)
Childcare benefits.

Additional Information:

Job Posted:
March 21, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Principal Engineer, Product Cybersecurity