Staff Cybersecurity Architect

JOB DESCRIPTION:

Under general direction, improves the security posture of the Company’s Cardiac Rhythm Management products and product development infrastructure, through threat modeling, cybersecurity design and implementation, risk assessment, and process improvement activities. Performs complex and specialized cybersecurity activities working within and across project teams, and in consultation with other cross-functional team members.

RESPONSIBILITIES:

• Optimize product/system security by creating and reviewing software architecture and detailed design solutions that reflect best practices.
• Identify and implement software improvements needed to effectively protect against and respond to known and emerging security threats.
• Perform threat modeling of a complex system of systems and provide mitigatory strategies for reducing cybersecurity risk.
• Communicate with the other engineering personnel to coordinate interrelated security solutions and assure project completion.
• Write cybersecurity requirements, design, and risk management documentation.
• Perform vulnerability management, vulnerability intake, and be able to understand and report on emerging cybersecurity threats and vulnerabilities to a cross-functional team.
• Interact with regulatory authorities and auditors, write technical explanations of cybersecurity features and controls for regulatory submissions.
• This is a non-supervisory position.

EDUCATION AND EXPERIENCE:

Required

Education:

• Bachelors Degree (8+ years) Software Engineering, Computer Science or related engineering field or an equivalent combination of education and work experience

Minimum 8 years:

• Security design for cloud and/or mobile and/or embedded systems/IOT with strong knowledge of cryptographic primitives
• Experience in health care, aerospace, defense (DoD, NSA, etc.), or other regulated sectors (Optional)

Preferred

• Certified Information Systems Security Professional (CISSP)
• As an alternative to CISSP, other professional security certifications such as CISM, CSA, CEH or similar.