1 month ago
Base Salary
$100k - $200k/yr
Responsibilities
- Design, implement, and validate cybersecurity controls for cloud applications, software products, and connected medical devices.
- Conduct penetration testing, vulnerability assessments, web application security testing, and technical security reviews using manual and automated methods.
- Identify vulnerabilities, assess risks, recommend remediation strategies, and track mitigation of code flaws, misconfigurations, and insecure software.
- Develop release security artifacts including SBOMs, vulnerability remediation evidence, threat models, and security documentation.
- Partner with software development, IT, external penetration testing, and leadership teams to address security findings and residual risk.
- Apply secure coding, dependency management, configuration hardening, authentication, certificate management, digital signatures, incident response, and disaster recovery practices.
- Use AI-assisted tools, agents, automations, and MCP servers to support vulnerability analysis, evidence collection, dashboarding, documentation, and remediation tracking.
- Promote secure and policy-compliant use of AI while addressing risks such as prompt injection, data leakage, and model or supply-chain risk.
- Support information security risk assessments and compliance with healthcare and regulatory requirements, including ISO and FDA expectations.
- Occasionally participate in client kick-off and discovery sessions to explain cybersecurity risks, requirements, and solutions.
Requirements
- Associate's degree and 7 years of relevant experience are required.
- At least 5 years of cybersecurity, product security, IT security, or related experience is preferred, with 7 or more years preferred overall.
- Bachelor's degree or higher is preferred.
- Hands-on experience with web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, SBOM generation, and network- and agent-based vulnerability scanning tools is preferred.
- Experience with cloud technologies, Windows and Linux operating systems, web applications, programming or scripting, and cybersecurity tools is required.
- Relevant certifications such as CISSP, CISA, CISM, CCSP, or CEH, or equivalent, are preferred.
- Product-development cybersecurity experience and familiarity with diagnostic equipment or medical devices are preferred.
- Experience building or modifying AI Skills and Automations, AI agents, and MCP servers for cybersecurity deliverables is preferred.
- Familiarity with ISO 27001, NIST cybersecurity frameworks, and audit or certification processes is preferred.
- Strong analytical, communication, documentation, independent judgment, and cross-functional collaboration skills are preferred.
Benefits
- Free medical coverage may be available through Abbott's Health Investment Plan PPO in the next calendar year.
- Excellent retirement savings plan with a high employer contribution.
- Tuition reimbursement, the Freedom 2 Save student debt program, and the FreeU education benefit.
- Career development opportunities with an international company.
- The role is performed on site daily in San Diego, California.
- Abbott provides health and wellness benefits and is an equal opportunity employer.
About Abbott
Abbott is a NYSE‑listed healthcare company that develops diagnostics, medical devices, nutrition products, and branded generic medicines for clinicians and consumers. Founded in 1888 and headquartered in Abbott Park, Illinois, it sells products in more than 160 countries, including the FreeStyle Libre continuous glucose monitoring system. Revenue comes primarily from product sales to hospitals, clinics, and retail channels.