Medical Device Cybersecurity Specialist – Hospital HTM, NIST & FDA

Max Corporate Group•New York, NY

1d•Onsite

About The Position

MaxIT Consulting – Max Corporate Group is seeking an experienced Biomedical Cybersecurity Specialist to secure connected medical devices and healthcare technology infrastructure in an onsite healthcare environment in Far Rockaway, Queens, New York. This is a hands-on individual-contributor role combining biomedical or medical-device experience with healthcare cybersecurity expertise. The specialist will work closely with Clinical Engineering, Healthcare Technology Management (HTM), hospital IT, Information Security teams, and medical device manufacturers to protect connected medical equipment and reduce cybersecurity risk. The role involves technical cybersecurity execution, medical-device knowledge, vulnerability management, risk analysis, regulatory compliance support, and cross-functional coordination. The successful candidate will work with medical-device inventories, manufacturers, hospital technology teams, security frameworks, and regulated healthcare environments. Candidates should live within practical daily commuting distance; relocation assistance is not available. Applicants must be legally authorized to work in the United States for any employer. Visa sponsorship is not available now or in the future.

Requirements

At least 3 years of relevant functional experience.
Bachelor's degree or equivalent professional experience.
Previous biomedical, biomed, clinical engineering, or hands-on medical-device experience.
Demonstrated healthcare cybersecurity experience.
Experience with connected medical devices in a hospital, healthcare technology, or medical-device environment.
Knowledge of medical-device cybersecurity controls and risk-assessment practices.
Experience with vulnerability management, remediation, patching, or cybersecurity incident response.
Familiarity with CMMS platforms used to manage medical-device assets and documentation.
Strong understanding of cybersecurity frameworks such as NIST and/or ISO.
Knowledge of healthcare and medical-device regulatory requirements, including FDA, Joint Commission, and HIPAA.
Understanding of network segmentation concepts and their application to connected medical devices.
Strong analytical, communication, and cross-functional collaboration skills.
Ability to lead technical initiatives independently and coordinate across multiple technical teams.
Valid driver's license and acceptable driving record.
Legally authorized to work in the United States for any employer; visa sponsorship is unavailable.

Nice To Haves

Relevant cybersecurity certifications, such as CISSP, HCISPP, CEH, or CompTIA Security+.
Experience in hospital systems, Healthcare Technology Management organizations, clinical engineering departments, biomedical environments, or medical-device manufacturers.
Experience improving cybersecurity visibility across medical-device inventories; leading vulnerability and patch-remediation efforts; responding to high-risk or zero-day vulnerabilities; conducting medical-device cybersecurity risk assessments; improving CMMS cybersecurity data quality; implementing or validating security controls; supporting network segmentation initiatives; coordinating remediation with manufacturers; supporting audits; or improving security awareness across biomedical and HTM teams.

Responsibilities

Lead the collection and maintenance of cybersecurity Critical Data Elements for medical devices in CMMS platforms.
Gather and maintain manufacturer cybersecurity documentation and recommendations.
Conduct cybersecurity risk assessments using asset data, manufacturer guidance, and identified vulnerabilities.
Oversee secure configuration of medical devices in accordance with cybersecurity standards and manufacturer requirements.
Lead planned vulnerability remediation, including patching and device upgrades.
Coordinate urgent and unplanned remediation involving high-risk or zero-day vulnerabilities.
Work with medical device manufacturers on cybersecurity remediation and technical issues.
Investigate cybersecurity alerts affecting medical devices and determine appropriate response actions.
Analyze high and critical vulnerabilities and develop remediation recommendations.
Track and report vulnerability-management and remediation activities.
Support testing and validation of network segmentation controls with hospital IT.
Participate in IT projects that may affect connected medical devices and clinical technology.
Identify opportunities to strengthen cybersecurity practices across HTM and IT.
Maintain the quality and accuracy of cybersecurity data and documentation in CMMS.
Support cybersecurity education and awareness for HTM and biomedical teams.
Coach BMET professionals on cybersecurity hygiene and secure device configuration.
Support hospital and enterprise audits involving cybersecurity and regulatory requirements.