Staff Cybersecurity Engineer

Job Summary:

The Staff Cyber Security Engineer will be on the front lines of the emerging area of medical device cybersecurity manufacturing as an integral member and technical leader within a team responsible for creating, deploying, and monitoring cybersecurity and information security solutions for medical devices. Interact with external and internal cybersecurity researchers to identify and remediate vulnerabilities within products and manufacturing systems. Work directly with R&D and Information Technology teams to ensure all relevant security risks are identified and evaluated, and appropriate and well-balanced solutions are implemented. Develop project security management deliverables for regulatory bodies to comply with standards/guidance documents, create and implement plans to address new standards/guidance, and successfully communicate cybersecurity technology to customers, regulatory bodies, and other stakeholders.

Responsibilities:

• Lead and perform product manufacturing cybersecurity-related activities ranging from incident response to vulnerability assessments to mitigation implementation.
• Develop and perform manufacturing intrusion detection activities.
• Lead manufacturing risk assessments in conjunction with product R&D teams and develop and recommend specific security controls for product/system-wide security needs.  Ensure recommended security controls are feasible for embedded/constrained environments, including prototyping where appropriate.
• Participate in the creation and testing of product manufacturing security-related requirements and processes.
• Evaluate and test security risks on programs across the entire development life cycle, including market-released products.
• Manage security-related deliverables for regulatory bodies, ensuring compliance with key standards/guidance documents.
• Work with third-party manufacturers to ensure appropriate manufacturing cybersecurity processes are in place.
• Contribute to the understanding of current industry best practices and how they can be applied to CRM Products.
• Develop advanced technical ideas and guide their development into the final product.
• Execute/ Assist activities to sustain/ develop internal and external partner security testing capabilities in alignment with testing strategies.
• Maintain a high level of technical knowledge of security.
• Champion consistent implementation of the Security Development Life cycle across projects
• Responsibilities may include the following and other duties may be assigned:
• Designs, develops, tests, debugs, and implements software and software tools.
• Determines systems software design requirements.
• Ensures that system improvements are successfully implemented and monitored to increase efficiency.
• Generates systems software engineering policies, standards, and procedures.

Required Qualifications:

• Bachelor’s in engineering or sciences

• 7+ years of related experience with a BS Degree in Engineering or Sciences
• 5+ years of related experience with a MS Degree in Engineering or Sciences
• Experience as an analyst, engineer, developer, or architect with core cybersecurity responsibility and knowledge in two or more of the following areas:
  • IoT (embedded) devices and systems
  • Cloud systems architecture and security
  • Enterprise and local network infrastructure security
  • Large-scale application architecture and security
  • Mobile device application architecture and security
  • Programming skills in one or more of the following: C, C++, Python, Java, .NET, Python, Go, Ruby, Scala, and/or Bash.
  • OS systems-level experience within one or more of the following: Linux, Windows, Android, iOS

Preferred Qualifications:

• Medical device manufacturing experience
• CISSP Certification
• Security incident management experience
• PKI Key management
• Token-based authentication systems
• Medical device technology
• Understanding of information security practices, risk management processes, cybersecurity principles, and incident response methodologies
• Ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies
• Leadership and collaboration skills with the ability to communicate complexity in a clear manner with internal and external stakeholders