Principal Cybersecurity Engineer - Urology

Boston Scientific - Arden Hills, MN

Full-time - Senior

Remote - Arden Hills, MN

Miscellaneous Manufacturing

About the position

Boston Scientific is seeking a product cybersecurity engineer to operationalize and support various cybersecurity activities, focusing on the security posture of the company's products and compliance with quality systems. This role involves collaboration with internal teams and consultants to implement the cybersecurity plan, supporting both pre and post-market product security activities.

Responsibilities

• Support and manage applicable tools for pre and post market security testing; support integration of the tools into the quality processes.
• Support post-market activities to identify known/unknown vulnerabilities associated with Boston Scientific's products.
• Provide inputs/technical expertise to multiple teams to eliminate/mitigate identified cybersecurity risks.
• Monitor for changes in security controls of products and update the product inventory and tracking database as needed.
• Support negotiations of hospital cybersecurity agreements by reviewing technical clauses with Legal and Research & Development subject matter experts.
• Support security risk assessment and threat modeling services for Urology products businesses and product development life cycle.
• Conduct application security reviews and vulnerability/penetration testing of Boston Scientific's medical devices and software.

Requirements

• Bachelor's degree or higher
• 10+ years in Research & Development and/or Information Technology experience
• Drive for learning cybersecurity and a passion for securing products
• Experience with vulnerability analysis of Windows and Linux operating systems as well as software
• Experience across various OS platforms such as Windows, MacOS, Linux, and Mobile (iOS, Android)
• General understanding of cybersecurity techniques, controls, and methodologies from frameworks such as NIST Special Publications and ISO standards.

Nice-to-haves

• Experience in cybersecurity roles in medical device development or health care organizations
• Cybersecurity certifications (e.g. Network+, Security+, CSSLP, HCISPP, CEH, CISSP) a plus.

Benefits

• Access to the latest tools, information, and training to advance skills and career
• Support for professional development and career progression