1 day ago
Base Salary
$113k - $227k/yr
Responsibilities
- Lead cybersecurity architecture reviews and secure-by-design initiatives for connected and embedded medical devices.
- Design and evaluate secure boot, hardware roots of trust, device identity, code signing, certificate management, and secure firmware update mechanisms.
- Develop and review security controls in C/C++, Python, Shell, Linux-based systems, and embedded platforms.
- Assess firmware, operating systems, bootloaders, hardware platforms, and hardware security controls for weaknesses.
- Conduct threat modeling, cybersecurity risk assessments, CVE analysis, SBOM review, vulnerability management, and remediation planning.
- Develop and execute security assessment plans, penetration testing and fuzz testing strategies, firmware analysis, and security validation.
- Support cybersecurity submissions, regulatory compliance, customer assessments, audits, questionnaires, and security requirements.
- Provide technical leadership and mentoring while influencing engineering, quality, product management, regulatory, and executive stakeholders.
Requirements
- Bachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, Software Engineering, Cybersecurity, or a related discipline.
- 8+ years of experience in cybersecurity engineering, product security, embedded systems, or related fields.
- 5+ years of hands-on experience securing embedded devices, firmware, medical devices, or IoT products.
- Strong knowledge of secure boot, hardware roots of trust, code signing, PKI and certificate management, cryptographic key management, firmware authentication and validation, and vulnerability assessment and remediation.
- Experience with threat modeling using STRIDE and OWASP, SBOM generation and analysis, CVE management and NVD scoring, penetration testing, security assessments, Linux administration, and embedded platforms.
- Programming experience in C/C++, Python, Shell scripting, or similar languages.
- Familiarity with ARM-based processors, embedded Linux, RTOS environments, and connected device architectures.
- Preferred experience in medical devices, healthcare technology, or other regulated industries.
- Preferred knowledge of FDA Cybersecurity Guidance, IEC 62304, ISO 14971, ISO 27001, UL 2900, AAMI TIR57/TIR97, NIST Cybersecurity Framework, NIST SP 800-53, HIPAA, and GDPR.
- Preferred experience with NXP i.MX platforms, Wind River/VxWorks, Secure Elements, TPM technologies, hardware security testing, fault injection, voltage glitching, side-channel analysis, and physical tampering assessments.
- Strong written communication, technical documentation, stakeholder communication, and customer, auditor, assessor, and regulatory engagement skills.
Benefits
- Career development opportunities with an international healthcare company.
- Eligible employees can qualify for free medical coverage through the Health Investment Plan PPO in the next calendar year.
- Retirement savings plan with a high employer contribution.
- Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit.
- Onsite position at Abbott's Tech Center in St. Paul, Minnesota.
- Standard work shift with approximately 10% travel.
- Continuous sitting, standing, and keyboard-use activities are part of the role.
About Abbott
Abbott is a NYSE‑listed healthcare company that develops diagnostics, medical devices, nutrition products, and branded generic medicines for clinicians and consumers. Founded in 1888 and headquartered in Abbott Park, Illinois, it sells products in more than 160 countries, including the FreeStyle Libre continuous glucose monitoring system. Revenue comes primarily from product sales to hospitals, clinics, and retail channels.