Principal Engineer, Cyber Security

This is where you save and sustain lives

At Baxter, we are deeply connected by our mission. No matter your role at Baxter, your work makes a positive impact on people around the world. You'll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients.

Baxter's products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.

Together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work.

Join us at the intersection of saving and sustaining lives—where your purpose accelerates our mission.

About Baxter

Baxter provides a broad portfolio of essential renal and hospital products, including home, acute and in-centre dialysis; sterile IV solutions; infusion systems and devices; parenteral nutrition; surgery products and anesthetics; and pharmacy automation, software and services. The company’s global footprint and the critical nature of its products and services play a key role in expanding access to healthcare in emerging and developed countries. Baxter’s employees worldwide are building upon the company’s rich heritage of medical breakthroughs to advance the next generation of healthcare innovations that enable patient care. 

The Opportunity

If you like to break apps and you know what it takes to secure apps, then our Application Security Engineer role is for you. Application security engineers work on a team that identifies threats and risks, vulnerabilities and attack vectors, and works with engineering to develop ways to mitigate and prevent. This is very much a product security role, where you have the opportunity to take ownership in the overall direction of the security of our products, including cloud and mobile apps. 

This role is on the front lines of securing hundreds of thousands of people’s healthcare and personal information. It is not just about finding and fixing vulnerability; it is very much revolutionizing the security of healthcare. Bring your technical chops to a really good cause. 

• Define, maintain and enforce application security best practices 
• Create secure design patterns and execute training and awareness to engineering team 
• Conduct architecture reviews, assess and validate application security 
• Conduct code reviews from a code security perspective 
• Explain and demonstrate vulnerabilities to application/system owners, provide recommendations for mitigation, and design solution prototypes and/or implement security enhancements 
• Investigate incidents and lead response efforts while identifying methods to improve using modern security techniques like fuzzing, etc. 
• Participate in building and maturing security operations 
• Work with Product and Engineering teams to review new features from a security perspective 
• Integrate security best practices and tooling into our CI/CD process, combining security with velocity. 

Essential Qualifications and Experience

• Experience of 5 to 8 years in Web development/Full stack development 
• Experience performing security-based code reviews and/or experience in using static code analysis and inspection tools such as Veracode, Coverity and/or Blackduck 
• In-depth knowledge of systems and security including cryptography, authentication protocols, intrusion detection systems, firewalls and VPNs 
• History finding bugs and security flaws in all system layers to minimize risk within an organization 

Desirable Qualifications and Experience

• FDA medical device incident preparedness and response playbook  
• Development of threat models and performing cybersecurity risk analysis 
• Experience with cloud infrastructure providers, specifically AWS  
• Experience with modern container orchestration, specifically Kubernetes 

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.