Principal Cybersecurity Engineer
Boston Scientific1 day ago
Base Salary
$102k - $194k/yr
Responsibilities
- Integrate security into the product development lifecycle for multiple product lines.
- Embed security controls across CI/CD pipelines and foster a security culture throughout the product lifecycle.
- Lead STRIDE threat modeling, security risk assessments, mitigation strategies, and risk documentation.
- Define product security requirements, design specifications, and verification and validation strategies.
- Automate vulnerability detection, secure coding, configuration management, and patching processes.
- Oversee incident response plans and processes for security incidents.
- Manage secrets, identity and access management, and least-privilege access.
- Track medical-device security regulations and standards, including FDA guidance and TIR 57.
- Collaborate with software development, quality, regulatory, and IT stakeholders.
- Present security topics and provide leadership to the Security Champions program.
Requirements
- Bachelor’s or master’s degree in cybersecurity, computer science, computer engineering, or a related field.
- At least 5 years of cybersecurity engineering experience with recent product-security focus extending to IoT cloud environments.
- Knowledge of DevSecOps tools and experience with complex embedded medical-device or similar technology architecture reviews.
- Demonstrated experience creating and executing security risk assessments and mitigation strategies.
- In-depth knowledge of cybersecurity frameworks, including the NIST Cybersecurity Framework and defense-in-depth practices.
- Strong written and verbal communication skills for technical teams, stakeholders, and executive leadership.
- Preferred qualifications include 4+ years in medical devices or another regulated environment, security architecture or healthcare administration experience, and experience securing Yocto, desktop Linux, Windows IoT, or Android.
- Preferred experience includes Active Directory or SSO integrations, Azure, AWS, Cumulocity, ThingWorx, secure coding, vulnerability scanning, penetration testing, embedded and network security, endpoint protection, wireless communications, network protocols, HSM, PKI, VA Handbook 6500 compliance, GIAC/ISSEP/ISSAP/CRISC certifications, and CVSS-based assessments.
Benefits
- Hybrid or onsite work model requiring at least three days per week in the Maple Grove, Minnesota office.
- Relocation assistance may be available for select out-of-state candidates.
- Employee benefits are offered through Boston Scientific’s core and optional benefits programs.
- Eligible exempt employees may receive annual bonus targets and long-term incentives.
About Boston Scientific
Boston Scientific designs and manufactures implantable and minimally invasive medical devices used by physicians to diagnose and treat cardiovascular, endoscopic, urological, neurological, and other conditions. It sells these products and related therapies to hospitals and health systems worldwide through a direct sales model and distributors. Founded in 1979 and headquartered in Marlborough, Massachusetts, it is publicly traded on the NYSE (BSX) with offerings spanning stents, catheters, electrophysiology, and neuromodulation systems.