Staff Cyber Security Engineer

Abbott • Los Angeles, CA

4d • $114,000 - $228,000 • Onsite

About The Position

The Staff Cyber Security Engineer works in Abbott’s Cardiac Rhythm Management division at its Sylmar, California location. The role is a technical leadership position focused on cybersecurity for medical-device manufacturing. The engineer creates, deploys, and monitors cybersecurity and information security solutions for medical devices; works with internal and external researchers to identify and remediate vulnerabilities; and partners with R&D and IT teams to assess security risks and implement balanced solutions. The role also develops regulatory security deliverables, addresses new standards and guidance, and communicates cybersecurity topics to customers, regulators, and other stakeholders.

The position includes product and manufacturing security work across the development lifecycle, from risk assessment and intrusion detection to incident response, vulnerability assessment, mitigation, and support for released products. It also involves collaboration with third-party manufacturers, advancing security testing capabilities, and promoting consistent use of the Security Development Life Cycle across projects. The engineer may also design, develop, test, debug, and implement software and tools; define systems software design requirements; monitor system improvements; and produce software engineering policies, standards, and procedures.

Requirements

• Bachelor’s degree in engineering or sciences.
• At least 7 years of related experience with a bachelor’s degree in engineering or sciences, or at least 5 years of related experience with a master’s degree in engineering or sciences.
• Experience as an analyst, engineer, developer, or architect with core cybersecurity responsibility and knowledge in two or more of these areas: IoT (embedded) devices and systems; cloud systems architecture and security; enterprise and local network infrastructure security; large-scale application architecture and security; or mobile device application architecture and security.
• Programming skills in one or more of the following: C, C++, Python, Java, .NET, Go, Ruby, Scala, or Bash.
• Operating-system-level experience in one or more of the following: Linux, Windows, Android, or iOS.

Nice To Haves

• Medical-device manufacturing experience.
• CISSP certification.
• Security incident management experience.
• PKI key management experience.
• Experience with token-based authentication systems.
• Medical-device technology experience.
• Understanding of information security practices, risk management processes, cybersecurity principles, and incident response methodologies.
• Ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies.
• Leadership and collaboration skills, including the ability to communicate complex topics clearly to internal and external stakeholders.

Responsibilities

• Lead and perform product-manufacturing cybersecurity activities, including incident response, vulnerability assessments, and mitigation implementation.
• Develop and perform manufacturing intrusion detection activities.
• Lead manufacturing risk assessments with product R&D teams and recommend security controls for product- and system-wide needs, considering feasibility in embedded or constrained environments and prototyping when appropriate.
• Participate in creating and testing product-manufacturing security requirements and processes.
• Evaluate and test security risks across the development lifecycle, including for market-released products.
• Manage security deliverables for regulatory bodies and ensure compliance with applicable standards and guidance.
• Work with third-party manufacturers to ensure appropriate manufacturing cybersecurity processes are in place.
• Contribute knowledge of industry best practices and their application to CRM products.
• Develop advanced technical ideas and guide their development into final products.
• Assist with sustaining and developing internal and external partner security-testing capabilities in alignment with testing strategies.
• Maintain a high level of technical security knowledge.
• Champion consistent implementation of the Security Development Life Cycle across projects.
• Design, develop, test, debug, and implement software and software tools.
• Determine systems software design requirements.
• Ensure system improvements are implemented and monitored to increase efficiency.
• Generate systems software engineering policies, standards, and procedures.

Benefits

• Career development opportunities with an international company.
• Free employee medical coverage through the Health Investment Plan (HIP) PPO, subject to the stated wellness-assessment condition for the next calendar year.
• Retirement savings plan with high employer contribution.
• Tuition reimbursement.
• Freedom 2 Save student debt program.
• FreeU education benefit, described as a path to earning a bachelor’s degree.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior