Boston Scientific - Arden Hills, MN
posted 5 months ago
Boston Scientific is seeking a product cybersecurity engineer whose primary responsibility is to operationalize and support various cybersecurity activities. This includes understanding and documenting the security posture of the company's products, applications, and supporting infrastructure, as well as ensuring compliance with the Quality systems and processes. The cybersecurity engineer will assist in implementing the individual product cybersecurity plan, which is crucial for maintaining the integrity and security of medical devices and software. The ideal candidate must possess a combination of strong communication and technical skills to effectively implement and support the functional and technical aspects of the cybersecurity plan. Collaboration with a team of internal staff and consultants is essential to execute the components of the plan successfully. This role is part of the Urology Research and Development (R&D) organization, where the engineer will work alongside analysts, IT/R&D engineers, and architects to support pre and post-market product security activities. These activities include application security, vulnerability assessments, threat modeling, penetration testing, and security analysis tools, as well as addressing hospital cybersecurity inquiries and contract reviews. In this role, the engineer will support and manage applicable tools for pre and post-market security testing, ensuring their integration into quality processes. They will also be responsible for identifying known and unknown vulnerabilities associated with Boston Scientific's products, providing technical expertise to multiple teams to mitigate identified cybersecurity risks. Monitoring changes in security controls of products and updating the product inventory and tracking database is also a key responsibility, along with communicating updates to stakeholders. The engineer will support negotiations of hospital cybersecurity agreements by reviewing technical clauses with Legal and Research & Development subject matter experts, and will assist in security risk assessments and threat modeling services for Urology products throughout the product development life cycle.