Senior Engineer Product Cybersecurity (US Remote/Hybrid)

This is where you save and sustain lives

At Baxter, we are deeply connected by our mission. No matter your role at Baxter, your work makes a positive impact on people around the world. You'll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients.

Baxter's products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.

Together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work.

Join us at the intersection of saving and sustaining lives- where your purpose accelerates our mission.

Your Role at Baxter

This is where your work saves lives

The research we do and the products we develop improve outcomes for patients around the world. As a Senior Engineer Product Cybersecurity at Baxter, your work contributes directly to making a significant impact on others. Its challenging work-and you're not on your own. Our teams collaborate multi-functionally and lead by influence. Whether guiding a team through a project or leading direct reports, our research and development team is responsible for influencing others to achieve results.

Our colleagues within our R&D organization desire to work on products that make a meaningful difference in others' lives. We are motivated by the power of teamwork and are natural leaders who are skilled at influencing others. When you join Baxter in this role, you'll use your analytical approach to identify risks and opportunities for innovation quickly. Agile and willing to take action, you stay calm under pressure!

Your Team

Do you want to use your Product Cybersecurity skills to make a difference in the world of Cardiology? Bardy Diagnostics is an exciting, fast growing organization within Baxter with unique and compelling products looking for the right Senior Engineer, Product Cybersecurity to help us achieve our mission!

Join a multi-skilled, dedicated, and versatile team developing innovative wearable cardiac arrhythmia monitors and associated cloud-based software. In this role, you'll lead the development team in securing these products and maintaining compliance. Your expertise in cybersecurity best practices will help form culture, provide valuable input into our technology roadmap, and guide developers on design patterns and requirements.

The Senior Engineer, Product Cybersecurity role will define and maintain the cybersecurity requirements and design. This role will drive key product cybersecurity activities to support new product development and maintenance of on-market products including threat modeling, cybersecurity risk assessment, managing 3rd party testing, and monitoring for vulnerabilities.

What you'll be doing

• Delivery of Product Cybersecurity portions of the Design History File including Threat Models, Cybersecurity Risk Assessments, Vulnerability Scanning, Penetration Testing, System Security Design Documentation, and 3rd party security testing reports.
• Collaborate with other product development functions to drive the implementation of cybersecurity controls and standard processes in the design and development lifecycle of medical products.
• Become the SME and work with Customer Experience and our EHR Integration teams to build a Knowledge Base related to our customers cybersecurity requirements.
• Work with the Risk Management Team to build and maintain the cybersecurity-related portions of the Risk Management File.
• Participate in the maintenance of the risk management and testing traceability.
• Support the accurate completion of product releases and design changes.
• Lead the handling and response to post-market cybersecurity issues and vulnerabilities.
• Assist in supervising for vulnerabilities in 3rd party software in our released products.
• Contribute to the improvement of cybersecurity risk management and design processes.
• Support FDA and other regulatory audits of product design history and technical files.
• Work on special projects as assigned.

What you'll bring

• Bachelor's degree in software, electrical, systems, biomedical or similar engineering or science subject area from an accredited college or university. (Advanced degree in related fields is preferred)
• Minimum of 10 years of experience in product development or related experience.
• 2+ years of proven experience in cybersecurity.
• 3+ years working on medical devices or similar industries with high regulatory burdens such as aerospace or defense.
• Solid understanding of cybersecurity principles such as confidentiality, integrity, authenticity, and availability and methods of implementing those principles
• Ability to optimally communicate cybersecurity concepts to executives, customers, and internal team members.
• Familiarity with global regulatory requirements and guidance for medical devices (e.g., FDA Pre- and Post-market guidance)
• Experience in/with vulnerability scanning, static code analysis, threat modeling, security risk assessments, penetration testing, cloud security (Azure), web application security, mobile device security is preferred.
• Familiarity with medical device standards and related documents such as AAMI TIR57, UL2900, IEC 80001, etc.
• Ability to participate in product requirements development and design input definition and decomposition.
• Experience with hazard analysis and assurance cases and knowledge of medical device software life cycle processes is a plus.

We understand compensation is an important factor as you consider the next step in your career. At Baxter, we are committed to equitable pay for all our employees, and we strive to be more transparent with our pay practices. To that end, this position has a base salary range of $68,000 to $156,000 plus an annual incentive bonus. The above range represents the expected base salary range for this position. The actual salary may vary based upon several factors including, but not limited to, relevant skills/experience, time in the role, business line, and geographic/office location.

#LI-PL1

The successful candidate for this job may be required to verify that he or she has been vaccinated against COVID-19, subject to reasonable accommodations for individuals with medical conditions or religious beliefs that prevent vaccination, and in accordance with applicable law.

Equal Employment Opportunity

Baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.

EEO is the Law

EEO is the law - Poster Supplement

Pay Transparency Policy

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.