Senior Cybersecurity Engineer

About the role

Boston Scientific is seeking a Product Cybersecurity Engineer to support critical post-market cybersecurity activities within the Cardiac Rhythm Management (CRM) Research and Development (R&D) organization.

Responsibilities

• Support and manage applicable tools for pre and post market security testing
• Support integration of the tools into the quality processes
• Support post-market activities to identify known/unknown vulnerabilities associated with Boston Scientific’s products
• Monitor changes in security controls of products and update the product inventory and tracking database as needed and communicate to stakeholders
• Support negotiations of hospital cybersecurity agreements by reviewing technical clauses with Legal and Research & Development subject matter experts
• Support, as needed, security risk assessment and threat modelling services for CRM products businesses and product development life cycle
• Support, as needed, application security reviews and vulnerability/penetration testing of Boston Scientific’s medical devices and software

Qualifications

• Bachelor’s degree or higher
• 8+ years of Research & Development or Information Technology experience, preferably in cybersecurity roles in medical device development or health care organizations
• Drive for learning cybersecurity and a passion for securing products
• Experience with vulnerability analysis of Windows and Linux operating systems as well as software
• Experience across various OS platforms such as Windows, MacOS, Linux, and Mobile (iOS, Android)
• General understanding of cybersecurity techniques, controls, and methodologies from frameworks such as NIST Special Publications and ISO standards

Preferred Qualifications

• Cybersecurity certifications (e.g. Network+, Security+, CSSLP, HCISPP, CEH, CISSP) a plus