Staff Cybersecurity Engineer

Abbott • Chicago, IL

4d • $99,300 - $198,700 • Remote

About The Position

This Staff Cybersecurity Engineer position can work out remotely within the U.S. The Staff Cybersecurity Engineer leads strategic cybersecurity initiatives that identify, prioritize, and resolve product security risks, vulnerabilities, and threats. This role drives mitigation and remediation strategies across complex, cross-functional product environments to ensure Abbott builds safe and secure products that comply with industry cybersecurity regulations and meet customer and patient security expectations.

Requirements

• Bachelor’s degree in computer science, Information Technology, Engineering, Security Systems, or related fields.
• Minimum 7 years of relevant professional experience, including at least 5 years of experience in IT management system, cybersecurity, or other relevant experience with a strong preference for product security, including consumer-facing applications and services.
• Demonstrated hands-on experience leading web, mobile, cloud infrastructure, and product security testing using DAST, SAST, SCA, SBOM generation tooling, and network- and agent-based vulnerability scanning tools.
• Ability to lead multiple complex cybersecurity initiatives with strong organization skills.
• Demonstrated critical thinking, analytical skills, judgment, and logic for resolving large, ambiguous problems in an environment with changing priorities.
• Ability to lead effectively in cross-functional team environments, adapting to rapidly changing business and technological needs while driving stakeholders toward clear decisions and outcomes.
• Excellent executive-facing documentation, communication, and interpersonal skills, with the ability to influence technical and non-technical stakeholders.

Nice To Haves

• Holds or is actively pursuing one or more industry-recognized cybersecurity certifications, such as CISSP, CISM, CEH, or equivalent.
• Previous work experience in a product development cybersecurity role.
• Familiarity with design of diagnostic equipment, medical devices, or other closely related products.

Responsibilities

• Drive strategic AI-enabled cybersecurity workflows through custom models, skills, and agentic development to reduce vulnerability risk, mature repeatable processes, and scale security decision support.
• Lead product cybersecurity release readiness by delivering SBOMs, vulnerability remediation evidence, and release security documentation. Drive technical reviews with development teams to resolve vulnerabilities, validate controls, manage remediation progress, and communicate residual risk.
• Lead vulnerability remediation and patch prioritization based on business impact, proof of exploit, regulatory expectations, and policy requirements, partnering with engineering, PMs, and product owners to drive timely risk reduction.
• Architect systematic remediation strategies and preventive controls that reduce recurring vulnerabilities, including secure coding practices, dependency management, configuration hardening, and scalable governance across product and supporting applications.
• Lead complex and ambiguous security problems to resolution by decomposing risk, aligning stakeholders on technical direction, removing blockers, and driving durable outcomes across large product and platform efforts.
• Validate security fixes through hands-on testing, with depth in one or more product security domains such as web application testing using Burp Suite and Postman, hardware testing, or verification of iOS and Android mobile application vulnerability remediation.
• Clearly communicate complex technical security concepts to executive leadership and cross-functional stakeholders, translating vulnerability findings, security controls, and security metrics into business-relevant risk insights and decision support.
• Lead remediation efforts after security assessments identify weaknesses requiring attention. Drive advancement of the cyber threat and vulnerability management program to ensure consistent identification, analysis, response, monitoring, and resolution of cybersecurity threats, events, and vulnerabilities.
• Leverage JIRA for security project and vulnerability management, building dashboards, reports, and automation workflows that improve remediation visibility, surface strategic metrics, and drive accountability across cross-functional teams.
• Lead triage of findings from application, network-based, and agent-based security scanning tools (SAST, DAST, SCA, infrastructure scanners) to determine true security impact, validate exploitability, distinguish false positives, and communicate residual risk and remediation activities to technical and non-technical audiences.
• Drive cross-functional execution of security goals and detailed implementation plans for security projects. Provide technical leadership, mentorship, and training on potential security risks, prevention strategies, and practical remediation approaches.

Benefits

• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.
• Participants who complete a short wellness assessment qualify for FREE coverage in our HIP PPO medical plan. Free coverage applies in the next calendar year.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior