Boston Scientific Senior Cybersecurity Engineer 

United States, Minnesota 

101964251

About The Role

Utilize your advanced technical proficiency and exceptional communication skills to collaborate effectively with internal teams and external consultants. This position is integral to the Research and Development organization, where you will lead and support pre and post market security activities, including vulnerability assessments, threat modeling, penetration testing, and security analysis.

Responsibilities

• Work closely with our Lead Cybersecurity Engineer.
• Conduct post-market activities to identify and mitigate vulnerabilities in Boston Scientific’s products, providing technical expertise to mitigate cybersecurity risks.
• Monitor changes in security controls of products, maintain accurate product inventory and tracking databases, and communicate updates to stakeholders.
• Collaborate with Legal and R&D teams to review technical clauses in hospital cybersecurity agreements.
• Provide security risk assessments and threat modeling services for Urology products and guide product development lifecycle.
• Conduct application security reviews and perform vulnerability and penetration testing on medical devices and software.
• Quickly grasp technical aspects of Boston Scientific’s products and customer needs, and drive necessary changes.
• Foster an inclusive work environment that promotes contribution from all team members towards organizational goals.
• Potential leadership opportunities overseeing activities in functional areas, divisions, or projects, ensuring compliance with company policies and regulatory requirements.

Minimum Required Qualifications

• Bachelor’s degree or higher in Computer Engineering, Electrical Engineering, Computer Science, or a related field.
• 5+ years of experience in Medical Device Research & Development and/or Information Technology, or equivalent with a strong focus on cybersecurity within medical device development.
• Demonstrated commitment to continuous learning in cybersecurity and a strong passion for product security.
• Expertise in vulnerability analysis of Windows and Linux operating systems and software.
• Proficiency across multiple OS platforms (Windows, MacOS, Linux, Mobile).
• Familiarity with cybersecurity frameworks such as NIST Special Publications and ISO standards.
• Willingness to work onsite 3+ days per week at our site in Arden Hills, Minnesota or Marlborough, Massachusetts

Preferred Qualifications

• Preferred cybersecurity certifications (e.g., CISSP, CSSLP, HCISPP, CEH, Security+, Network+).
• Experience with cybersecurity best practices and standards
• Experience working with integrated systems involving test platforms and simulators
• Experience with regulatory standards including IEC 62304, FDA 510(k), PMA

Base Salary Range

Minimum Salary: $ 82600

Maximum Salary: $ 156900

Compensation for
exempt rolesmay also include variable compensation, i.e., annual bonus target and long-term incentives (subject to plan eligibility and other requirements).

Please be advised that certain US based positions, including without limitation field sales and service positions that call on hospitals and/or health care centers, require acceptable proof of COVID-19 vaccination status. Candidates will be notified during the interview and selection process if the role(s) for which they have applied require proof of vaccination as a condition of employment. Boston Scientific continues to evaluate its policies and protocols regarding the COVID-19 vaccine and will comply with all applicable state and federal law and healthcare credentialing requirements.

As employees of the Company, you will be expected to meet the ongoing requirements for your roles, including any new requirements, should the Company’s policies or protocols change with regard to COVID-19 vaccination.

Among other requirements, Boston Scientific maintains specific prohibited substance test requirements for safety-sensitive positions. This role is deemed safety-sensitive and, as such, candidates will be subject to a prohibited substance test as a requirement. The goal of the prohibited substance testing is to increase workplace safety in compliance with the applicable law.