Principal Cybersecurity Engineer at Boston Scientific Corporation Malaysia

Maple Grove, Minnesota, United States -

Full Time

Start Date

Immediate

Expiry Date

02 Mar, 26

Salary

0.0

Posted On

02 Dec, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity Engineering, Product Development, Risk Management, Security Design, Architecture Reviews, Security Risk Assessments, Mitigation Strategies, Cybersecurity Frameworks, Privacy Regulations, Leadership, Communication Skills, Collaborative Work, Secure Coding Practices, Vulnerability Scanning, Embedded Systems Security, FDA Regulations

Industry

Medical Equipment Manufacturing

Description

Bachelor's or master's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field. 9+ years of experience in cybersecurity engineering, with a focus on product development and risk management. Proven experience leading security design and architecture reviews for complex, embedded medical devices or similar technologies. Demonstrated track record of creating and executing security risk assessments and mitigation strategies. In-depth understanding of cybersecurity frameworks (e.g., NIST Cybersecurity Framework). Understanding of privacy regulations (HIPAA, GDPR) and their intersection with medical device cybersecurity. Strong leadership, decision-making, and team-building capabilities. Excellent written and verbal communication skills for interfacing technical teams, stakeholders, and executive leadership. Ability to work collaboratively across multidisciplinary teams, bridging gaps between technical, regulatory, and business functions. 5+ years of experience working in the medical device industry or a similarly regulated environment; security architecture or medical device administration experience in healthcare settings is also a plus. Hands-on experience with secure coding practices, vulnerability scanning tools, fuzzing, and penetration testing methodologies. Knowledge of embedded systems security, wireless communications, network protocols, and PKI. Familiarity with FDA regulations and guidance documents for medical devices (e.g., 21 CFR Part 820). Working knowledge of SW96/TIR57/TIR97, IEC 62304 (software lifecycle), IEC 60601 (electrical safety), and ISO 14971 (risk management). Experience supporting VA Handbook 6500 compliance and ISO/IEC 27001 certification. Relevant certifications (e.g., GIAC, OffSec, CISSP, CISM, CRISC) are a plus.

Responsibilities

The Principal Cybersecurity Engineer will lead security design and architecture reviews for complex medical devices, ensuring compliance with cybersecurity frameworks and privacy regulations. They will also create and execute security risk assessments and mitigation strategies.