Vantive: A New Company Built On Our Legacy

Baxter is on a journey to separate our ~$5B Kidney Care segment into a standalone company. Vantive* will build on our nearly 70-year legacy in acute therapies and home and in-center dialysis to provide best-in-class care to the people we serve. We believe Vantive will not only build our leadership in the kidney care space, it will also offer meaningful work to those who join us.

At Vantive, you will become part of a community of people who are focused, courageous and don’t settle for the mediocre. Each of us are driven to help improve patients’ lives worldwide. Join us as we revolutionize kidney care and other vital organ support.

*Completion of the proposed separation of Kidney Care from Baxter into a standalone company (to be named Vantive) remains subject to the satisfaction of customary conditions.

Job Responsibilities

In this role you will be responsible for designing, building, testing and implementing systems with the primary goal of product security across Baxter’s software as a medical device product portfolio in various operating environments. Prevention of breach of Intellectual Property (IP), Attack surface minimization, preventive security and privacy controls, incident/vulnerability management are some of the focal areas for this position.

This role requires deep knowledge of security by design, web-based secure code principles, and web application development including microservice security and system hardening in cloud environments. Candidates should have experience in web-application development or cloud software development with a desire to secure products protecting our customers and patients who use our products each day. Success in this role required a strong understanding and interest of the latest security standards, systems, protocols, and products.

Essential Responsibilities

• Work directly with software developers in building a security by design mindset by defining implementations and coding inline with the Application Security Program mandates
• Implement secure code solutions, design patterns, and code guidelines that meet security and privacy requirements defined in the security plans, risk assessments, policies, and procedures
• Support security project governance through scheduling activities, planning and prioritization
• Proactively drive security solutions implementation in-alignment with the development leads, security architects and product owner(s)
• Drive feature implementations in line with the architecture via designs, coding, reviews and tests. Perform Proof of Concept (POC) activities as necessary
• Review, Analyze and mitigate SAST, DAST, SCA, and penetration test results in collaboration with the developers for various non-medical and software as medical devices (SaMD) product lifecycles
• Review current software security control measures and implement security enhancements for multiple cloud-based products
• Participate in post-market product analysis to support vulnerability investigations as required as well as be engaged in continuous security monitoring

Desired Technical skills / experience:

• Experienced security developer able to interpret and guide software development teams on secure coding practices and application security test report interpretation for various coding languages and multiple cloud services
• Strong knowledge of secure software development lifecycle and practices including SAFe/ Agile methodologies for software development
• Understanding of security by design principles and architecture level security concepts
• Sound understanding and experience in implementing security technologies/techniques like Cryptographic Algorithms/Cipher Suites, Public key Infrastructure (PKI)), network security protocols, OAuth, 2-factor authentication, and data at rest encryption standards
• Experience implementing OWASP Top10 application security guidelines in cloud-based web applications
• Experience with cloud-based design and security controls (e.g. network security, instance hardening, identify and access control, cloud environment configuration best practices)
• Experienced in generating, defining, and reviewing penetration test results through knowledge of standard methodologies and tools including environmental configuration definition, security analysis, threat modeling, and system security audits
• Knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
• Exposure to international privacy requirements & cross-industry trends

Qualifications and Skills

• Bachelor's degree in Computer Science, a related field or equivalent demonstrated experience and knowledge
• Minimum 6+ years of experience in software development or related fields.
• Minimum 3 years technical experience implementing cybersecurity requirements in cloud/hosted server environment
• 2 years working with each of the following:
  • Software development experience using web/application software technologies such as C/C++, Java, .Net, python, etc.
  • Experience analyzing, interpreting, and mitigating security findings from multiple sources including SAST, DAST, SCA and penetration tests.

Baxter is committed to supporting the needs for flexibility in the workplace. We do so through our flexible workplace policy which includes a minimum of 3 days a week onsite. This policy provides the benefits of connecting and collaborating in-person in support of our Mission.

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.