This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
This is where your work saves lives. As Senior Principal Engineer, own and direct the cybersecurity design and analysis of multiple medical devices. Demonstrate subject matter expert knowledge in state-of-the-art security principles.Resolve difficult problems, from conception to final design with team input. Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance. Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan. Utilizes solid understanding of device and system connectivity concepts in a medical device domain. Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables. Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.
Job Responsibility:
Implement proof of concept project to define innovative solutions on platforms/server platforms
Lead implementation of medical device cybersecurity principles as part of an overall security architecture
Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted
Create threat models of medical device systems and the interfaces between medical devices
Perform vulnerability scanning of medical device systems and analyze results
Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions
Drive cybersecurity improvements through product the cross functional teams, primarily software
Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service)
Ensure compliance to the product development process and Quality System and Design Control requirements
Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met
Requirements:
BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
Experience with cybersecurity related software such as Blackduck, Coverity, etc
Experience dealing with threat intelligence, CWEs and CVEs
Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc
Experience with cybersecurity functionality on embedded systems and hosted software applications
Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
Ability to convince management on courses of action with minimal assistance using both written and verbal methods
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time
What we offer:
Medical and dental coverage
Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
Employee Stock Purchase Plan (ESPP)
401(k) Retirement Savings Plan (RSP)
Flexible Spending Accounts
Educational assistance programs
Paid holidays
Paid time off ranging from 20 to 35 days based on length of service