Sr. Cybersecurity Engineer

Additional Location(s):  N/ADiversity
- Innovation
- Caring
- Global Collaboration
- Winning Spirit
- High Performance At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.

About the role:

Boston Scientific is seeking a Senior Cybersecurity Engineer with a background in Dev Sec Ops  and the design, development, and testing of cybersecurity features and controls in a regulated industry. This individual will be responsible for driving the cybersecurity strategy and Dev Sec Ops  throughout the product lifecycle, ensuring compliance with relevant standards and  a part of the Interventional Cardiology team, one of Boston Scientific’s most product-diverse divisions, supporting R&D in the design of exciting products and business development activities.

Work Mode:

At Boston Scientific, we value collaboration. This role follows a hybrid or onsite work model, requiring employees to be in our Maple Grove (Arbor Lakes), MN office at least three days per week.

Relocation:

Relocation assistance may be available for select out-of-state candidates.

Your responsibilities will include:

Integrate security into the product development lifecycle of multiple product lines.

Foster a collaborative security culture from conception to decommission.

Collaborate with product development teams to embed security controls throughout the CI/CD pipeline.

Lead threat modeling using STRIDE and security risk assessments, identifying, and evaluating potential threats and safety issues.

Elicit and define product security needs and requirements; define product security requirements, design specifications, and verification and validation strategies. Establish best practices and automate processes for vulnerability detection, secure coding, configuration management, and patching.

Implement risk mitigation strategies and maintain risk management documentation.

Oversee and enhance incident response plans and processes, ensuring rapid and effective resolution of security incidents.

Manage secrets, identity and access management to ensure least privilege access.

Stay current with emerging regulations and standards related to medical device security (e.g., FDA Premarket Guidance, Post-market Cybersecurity Guidance, TIR 57).Collaborate closely with internal stakeholders (Software Development, Quality, Regulatory, IT) to align security goals and requirements.

Model resiliency and show leadership by presenting topics to the Security Champions program.

Required qualifications:

Bachelor’s or master’s degree in Cybersecurity, Computer Science, Computer Engineering, or a related field.

Mininum of 5 years of experience in cybersecurity engineering, with a recent focus on product security as it extends to the IoT cloud.

Knowledge of Dev Sec Ops  tools.

Proven experience in design and architecture reviews for complex, embedded medical devices or similar technologies.

Demonstrated history of creating and executing security risk assessments and mitigation  understanding of cybersecurity frameworks (e.g., NIST Cybersecurity Framework) including best practices for defense in depth.

Excellent written and verbal communication skills for interfacing technical teams, stakeholders, and executive leadership.

Ability to work collaboratively across multidisciplinary teams, bridging gaps between technical, regulatory, and business functions.

Preferred qualifications:

4+ years of experience working in the medical device industry or a similarly…