15 days ago
Base Salary
$113k - $227k/yr
Responsibilities
- Lead cybersecurity architecture reviews and secure-by-design initiatives for connected and embedded medical devices.
- Design and evaluate secure boot, hardware roots of trust, device identity, code signing, certificate management, and secure firmware update mechanisms.
- Develop and review security controls in C/C++, Python, Shell, Linux-based systems, and embedded platforms.
- Assess firmware, operating systems, bootloaders, hardware platforms, and hardware security controls for vulnerabilities.
- Conduct threat modeling, cybersecurity risk assessments, CVE analysis, SBOM review, and vulnerability management.
- Develop and execute security assessment plans, penetration testing support, fuzz testing, firmware analysis, and security validation.
- Drive remediation of security findings and support secure product releases and compliance activities.
- Prepare cybersecurity documentation and communicate risks, mitigations, and compliance status to engineers, leaders, customers, auditors, and regulatory agencies.
- Provide technical leadership and mentoring while improving cybersecurity processes and engineering practices.
Requirements
- Bachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, Software Engineering, Cybersecurity, or a related discipline.
- At least 8 years of experience in cybersecurity engineering, product security, embedded systems, or related fields.
- At least 5 years of hands-on experience securing embedded devices, firmware, medical devices, or IoT products.
- Strong knowledge of secure boot, hardware roots of trust, code signing, PKI, certificate management, cryptographic key management, firmware authentication, and vulnerability remediation.
- Experience with STRIDE, OWASP, SBOM generation and analysis, CVE management, NVD scoring, penetration testing, security assessments, Linux administration, and embedded platforms.
- Programming experience in C/C++, Python, Shell scripting, or similar languages.
- Familiarity with ARM processors, embedded Linux, RTOS environments, and connected device architectures.
- Strong written communication, technical documentation, stakeholder communication, and technical leadership skills.
- Preferred experience in medical devices, healthcare technology, or regulated industries.
- Preferred knowledge of FDA Cybersecurity Guidance, IEC 62304, ISO 14971, ISO 27001, UL 2900, AAMI TIR57/TIR97, NIST Cybersecurity Framework, NIST SP 800-53, HIPAA, and GDPR.
- Preferred experience with NXP i.MX, Wind River/VxWorks, Secure Elements, TPM technologies, hardware security testing, fault injection, voltage glitching, side-channel analysis, and physical tampering assessments.
Benefits
- Career development opportunities with an international company.
- Employees may qualify for free medical coverage through the Health Investment Plan PPO in the next calendar year.
- Excellent retirement savings plan with a high employer contribution.
- Tuition reimbursement, the Freedom 2 Save student debt program, and the FreeU education benefit.
- Onsite position at Abbott's Tech Center in St. Paul, Minnesota.
- Equal opportunity employer with stated commitments to employee diversity.
About Abbott
Abbott is a NYSE‑listed healthcare company that develops diagnostics, medical devices, nutrition products, and branded generic medicines for clinicians and consumers. Founded in 1888 and headquartered in Abbott Park, Illinois, it sells products in more than 160 countries, including the FreeStyle Libre continuous glucose monitoring system. Revenue comes primarily from product sales to hospitals, clinics, and retail channels.