Software Cybersecurity Engineer

Abbott • San Diego, CA

1d • Onsite

About The Position

The Software Cybersecurity Engineer works on site in our San Diego, CA location in Abbott Rapid Diagnostics, on our Infectious Diseases team. This role is on site daily. Our diagnostic solutions are used in hospitals, laboratories, and clinics around the globe. The crucial information derived from our tests, instruments, and informatics systems is often the first step in patient care decision-making for hundreds of health conditions from heart attacks to blood disorders to infectious diseases and cancers. We’re excited to share a highly rewarding and hands-on opportunity for a skilled and experienced Software Cybersecurity Engineer to join our growing team. As part of our team, you will be responsible for cloud cybersecurity, penetration testing, vulnerability assessments, and reporting findings to help detect bleeding-edge security vulnerabilities in Azure Cloud environment.

Requirements

• Associate's degree and 7 years of relevant experience.
• Minimum 5 years (7+ preferred) in cybersecurity, product security, IT security, or related experience, with a strong preference for product security (consumer-facing applications and services) and hands-on engineering.
• Demonstrated hands-on experience conducting web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, SBOM generation tooling, and network- and agent-based vulnerability scanning tools.
• Holds or working toward one or more relevant certifications - e.g., CISSP, CISA, CISM, CCSP, or CEH (or equivalent).
• Advanced experience applying AI into everyday tasks, including utilizing AI Skills and Automations, AI agents, and MCP servers; ability to build and modify agents that produce or support cybersecurity deliverables.
• Familiarity with new and emerging AI tools/copilots and the judgment to adopt them securely and in line with policy.
• Understanding of ISO 27001 and NIST cybersecurity frameworks; experience with audit and certification processes.
• Strong analytical and critical-thinking skills, sound judgment, and the ability to work independently on complex tasks in an environment with changing priorities.
• Excellent documentation, oral, and written communication skills for interaction with all levels of management and staff, including the ability to communicate business risk as it relates to cybersecurity.
• Strong team player able to communicate effectively within cross-functional groups and perform peer reviews of work products and documents.

Nice To Haves

• Bachelor's degree or higher Education
• prior product-development cybersecurity role; familiarity with diagnostic equipment, medical devices, or closely related products.

Responsibilities

• Designs, implements, and validates cybersecurity controls for cloud-based applications, software products, and connected medical devices.
• Identifies and assesses security risks, vulnerabilities, and emerging threats, driving remediation strategies that ensure products remain secure, compliant, and aligned with industry and regulatory cybersecurity requirements.
• Independently leads complex cybersecurity initiatives, delivering release-ready security artifacts, conducting technical security reviews with engineering teams, and translating vulnerability findings into actionable, business-focused risk insights for technical and leadership stakeholders.
• Leverages automation and AI-enabled tools to improve security assessment, risk analysis, and compliance outcomes.
• The role also advances the team's use of AI and agentic automation to accelerate and improve the quality of cybersecurity deliverables.
• Work closely with corporate\external penetration testing team to identify vulnerabilities and find mitigations and resolutions.
• Identify and assess vulnerabilities in systems and applications. This includes utilizing manual and automated testing methods to find and exploit code flaws, misconfigurations, and insecure software.
• Keep cybersecurity training and knowledge current by monitoring the latest security threats and vulnerabilities.
• Provide recommendations for remediation of identified vulnerabilities.
• Develop and deliver cybersecurity artifacts for product software releases, including SBOMs, vulnerability remediation evidence, threat models, and release security documentation; lead technical reviews with development teams on vulnerabilities, security controls, remediation progress, and residual risk.
• Design and recommend systematic remediation strategies and preventive controls to reduce recurring vulnerabilities, including secure coding practices, dependency management, and configuration hardening across product and supporting applications.
• Occasionally join senior leaders or stakeholders on client kick-off and discovery sessions to answer questions from prospects and clients.
• Provide information security expertise and assist in incorporating control measures into new and existing projects around medical device security.
• Assist with performing risk assessments of existing and new Abbott cloud systems and medical devices.
• Design and development of security strategies for cloud-based applications including hardening, incident response, pen testing, and disaster recovery.
• Perform all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
• Apply in-depth knowledge of user authentication, certificate management, digital signatures, and cloud security architecture.
• Demonstrate commitment to the development, implementation and effectiveness of the Quality Management System per ISO, FDA, and other regulatory agencies.
• Use your knowledge of programming languages such as Python, JavaScript, React
• Use AI-assisted development tools (e.g., GitHub Copilot and other LLM-based code assistants) to write, review, and secure code more efficiently.
• Lean on your knowledge of web application security, including experience with web application scanners and manual testing techniques.
• Apply familiarity with AI-powered cybersecurity tools (e.g., AI-assisted threat detection, vulnerability triage, and log analysis), validating results for accuracy and safety.
• Apply AI to cybersecurity deliverables to improve speed and quality - e.g., AI-assisted vulnerability triage and deduplication, SBOM and CVE analysis, drafting of security documentation and remediation evidence, and summarizing findings into risk insights.
• Maintain working familiarity with current and emerging AI tools and copilots, and evaluate them for safe, policy-compliant use in security workflows.
• Build, configure, and modify agentic AI applications (AI agents, Skills/Automations, and MCP servers) that automate cybersecurity deliverables such as scan-result analysis, evidence collection, dashboarding, and remediation tracking - with appropriate guardrails, human review, and data-handling controls.
• Promote responsible and secure AI use, including awareness of AI/LLM-specific risks (e.g., prompt injection, data leakage, model/supply-chain risk) in both Abbott products and internal security tooling.

Benefits

• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution.
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree