Sr. Product Security Engineer

This is where you save and sustain lives

At Baxter, we are deeply connected by our mission. No matter your role at Baxter, your work makes a positive impact on people around the world. You'll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients.

Baxter's products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.

Together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work.

Join us at the intersection of saving and sustaining lives- where your purpose accelerates our mission.

JOB LOCATION: Deerfield, IL

POSITION: Sr. Product Security Engineer

POSITION DESCRIPTION: Baxter Healthcare Corporation is seeking a Sr. Product Security Engineer with the following duties: Perform penetration testing and vulnerability scanning on different embedded medical device, IoT Devices, computer applications, and middleware software; Find Critical to Informative vulnerabilities and report them to the product team; Develop comprehensive and accurate reports and presentations for various business units of penetration testing results; Provide input into the design of medical devices to build in security; Work with R&D teams and different Global Business Units (GBUs) in understanding issues arising from testing and alignment; Work on security risk assessments for embedded devices and middleware software; Help Global Business Units (GBUs) to review Threat Models and Secure Design documents; Develop scripts, tools, or methodologies to enhance penetration testing processes.

REQUIREMENTS: Bachelor's degree in Information Technology, Cybersecurity or a related field plus 2 years of related experience. Will accept any level of experience in the following skills: Ability to perform penetration tests on products using Gray Box methodology with a variety of tools including Metasploit, Burp Suite, Wireshark, tcpdump, and other tools from Kali Linux OS and Parrot OS; Ability to perform penetration test on medical IoT devices, firmware, cloud solutions and mobile software products; Ability to investigate security vulnerabilities and/or breaches with a variety of tools including Nessus, NMAP, and work with other departments to provide consultation regarding their security concerns; Work with the software teams to establish testable security requirements; Experience in addressing OWASP Top 10 vulnerabilities; Build technical documentation around the security of a product including threat modeling, privacy assessments, and whitepapers; Work collaboratively with product teams on annual SOC2 and HiTrust audits for products; Participate in project planning and scoping of security related deliverables and activities; Programming Language C, C++, and Python; Experience with all of the following: NIST 800-53, AMII TIR57, FDA Pre-Post Market Guidance, DoD RMF/ATO, SOC2, HiTrust, and EU MDR. Must have Certification in security such as CEH, OSCP or equivalent. 100% remote position. Can live anywhere in the U.S.

Full time. $96,000 - $144,000 per year. Competitive compensation and benefits.

Qualified applicants can apply directly to the Baxter Website at: www.Baxter.com. Please search "Keyword" using job #JR-100628. EOE

The successful candidate for this job may be required to verify that he or she has been vaccinated against COVID-19, subject to reasonable accommodations for individuals with medical conditions or religious beliefs that prevent vaccination, and in accordance with applicable law.

Equal Employment Opportunity

Baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.

EEO is the Law

EEO is the law - Poster Supplement

Pay Transparency Policy

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.