Principal Engineer, Product Cybersecurity

Baxter•Round Lake, IL

1d•Hybrid

About The Position

This is where your work makes a difference. At Baxter, we believe every person—regardless of who they are or where they are from—deserves a chance to live a healthy life. It was our founding belief in 1931 and continues to be our guiding principle. We are redefining healthcare delivery to make a greater impact today, tomorrow, and beyond. Our Baxter colleagues are united by our Mission to Save and Sustain Lives. Together, our community is driven by a culture of courage, trust, and collaboration. Every individual is empowered to take ownership and make a meaningful impact. We strive for efficient and effective operations, and we hold each other accountable for delivering exceptional results. Here, you will find more than just a job—you will find purpose and pride. Your Role at Baxter This is where your work saves lives. As Senior Principal Engineer, own and direct the cybersecurity design and analysis of multiple medical devices. Demonstrate subject matter expert knowledge in state-of-the-art security principles. Resolve difficult problems, from conception to final design with team input. Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance. Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan. Utilizes solid understanding of device and system connectivity concepts in a medical device domain. Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables. Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.

Requirements

BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years.
Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis.
Experience with cybersecurity related software such as Blackduck, Coverity, etc.
Experience dealing with threat intelligence, CWEs and CVEs.
Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
Experience with cybersecurity functionality on embedded systems and hosted software applications.
Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel.
Ability to convince management on courses of action with minimal assistance using both written and verbal methods.
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

Responsibilities

Implement proof of concept project to define innovative solutions on platforms/server platforms.
Lead implementation of medical device cybersecurity principles as part of an overall security architecture.
Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted.
Create threat models of medical device systems and the interfaces between medical devices.
Perform vulnerability scanning of medical device systems and analyze results.
Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions.
Drive cybersecurity improvements through product the cross functional teams, primarily software.
Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service).
Ensure compliance to the product development process and Quality System and Design Control requirements.
Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met.

Benefits

medical and dental coverage that start on day one
insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
Employee Stock Purchase Plan (ESPP), with the ability to purchase company stock at a discount
401(k) Retirement Savings Plan (RSP), with options for employee contributions and company matching
Flexible Spending Accounts
educational assistance programs
paid holidays
paid time off ranging from 20 to 35 days based on length of service
family and medical leaves of absence
paid parental leave
commuting benefits
Employee Discount Program
Employee Assistance Program (EAP)
childcare benefits