Clinical Engineering Medical Device Security Engineer

CommonSpirit Health • Centennial, CO

3d • $45 - $67

About The Position

As a Clinical Engineering Medical Device Security Engineer I, you will help safeguard CommonSpirit Health’s medical device environment, protecting device integrity and patient safety. You will help mitigate cybersecurity vulnerabilities and threats, develop and test remediation strategies, and support compliance with cybersecurity regulations and standards.

The role works with cross-functional teams to implement mitigation strategies, develop and test medical device security patching and remediation instructions, and lead system-wide remediation efforts following security incidents. You will assess medical devices for security risks by reviewing MDS2 forms and obtaining information from original equipment manufacturers (OEMs), resolve technical challenges, and support field technicians. Participation in a rotational on-call schedule is required, including nights, weekends, and holidays, with availability to respond to urgent service needs outside regular business hours and potentially return to the facility on short notice.

Requirements

• Bachelor’s degree in HTM, Computer Science, Technology, or a business discipline, or equivalent professional experience.
• 2–4 years of experience in healthcare/IT security, system administration, software development, or a related field.
• 1–2 years of experience working in a healthcare or medical environment.
• Experience working with specialized medical equipment in a healthcare setting.
• Experience with Cybersecurity and Infrastructure Security Agency (CISA) and HIPAA/HITECH compliance standards.
• Valid driver’s license.
• Availability for rotational on-call coverage, including nights, weekends, and holidays, and to return to the facility on short notice if required.

Nice To Haves

• Experience with the software development life cycle or project management methodologies.
• Certified Radiology Equipment Specialist (CRES).
• Certified Biomedical Equipment Technician (CBET).
• Certified Healthcare Technology Manager (CHTM).
• CompTIA A+ certification.
• CompTIA Network+ certification.

Responsibilities

• Collaborate with cross-functional teams to implement mitigation strategies addressing medical device security vulnerabilities and threats.
• Develop and test medical device security patching and remediation instructions while maintaining device integrity, reliability, and patient safety.
• Lead system-wide remediation efforts during security incidents, coordinating with cross-functional teams to return devices to service and implement measures to prevent future attacks.
• Assess system-wide medical devices for security risks and vulnerabilities by reviewing MDS2 forms and obtaining information from medical device OEMs.
• Ensure medical devices comply with relevant cybersecurity regulations, standards, and guidelines.
• Resolve technical challenges and support field technicians.
• Participate in a rotational on-call schedule, including nights, weekends, and holidays, and respond to urgent service needs outside regular business hours.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level