Product Cybersecurity Specialist

This is where you save and sustain lives

At Baxter, we are deeply connected by our mission. No matter your role at Baxter, your work makes a positive impact on people around the world. You’ll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients. 

Baxter’s products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.

Together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work. 

Join us at the intersection of saving and sustaining lives— where your purpose accelerates our mission. 

Your Role at Baxter

This is where your work saves lives.

At Baxter Healthcare, our mission is to save and sustain lives by delivering innovative products and services that form the essential building blocks of healthcare. As we continue to pioneer advancements in medical technology, we recognize that ensuring the safety and security of our medical devices is paramount. We are seeking aMedical Device Cybersecurity Engineerwho is passionate about cybersecurity and dedicated to protecting the integrity of our life-saving products.

As a Product Cybersecurity Engineer, you will play a critical role in safeguarding our medical devices, products, and applications. You will be responsible for conducting state-of-the-art pre-market threat analysis and risk assessments, ensuring that cybersecurity is woven into the fabric of our product development lifecycle. Your expertise will help us maintain the highest standards of safety and security for our global healthcare solutions.

What You'll Be Doing

• Cybersecurity Strategy Leadership: Define and implement the cybersecurity strategy across Digital Health STG and the Baxter Hospital Platform, ensuring alignment with organizational goals.

• Cross-Functional Collaboration: Provide strategic guidance and collaborate with Global Business Units (GBUs) to architect, design, and develop robust software security features for multiple products and platforms.

• Innovative Security Solutions: Implement cutting-edge security solutions for platforms and server environments, enhancing the overall security architecture.

• Threat Modeling and Risk Assessment: Model cybersecurity threats using tools such as STRIDE and assess risks using the Common Vulnerability Scoring System (CVSS).

• Vulnerability Management: Assess security findings from various sources, including Static Code Analysis and Penetration Testing, to identify and mitigate known and unknown vulnerabilities in Baxter’s medical devices.

• Development of Security Tools: Create and enhance security tools that collect cyber threat intelligence, track emerging vulnerabilities, and implement secure coding standards.

• Certification Support: Support medical device cybersecurity certification programs, such as UL 2900, ensuring compliance with industry standards.

• Internal Security Testing: Conduct internal security tests to validate the security capabilities and compliance of medical devices.

• Strategic Partnerships: Maintain relationships with strategic partners to ensure Baxter's cybersecurity development processes are industry-leading and top quartile.

• Regulatory Interface: Interface with ministries of health and certifying bodies to represent Baxter in threat analysis, certification, and notifications.

What You'll Bring

• Educational Background: Bachelors in Computer Science, Electrical Engineering, Software Engineering, or a related engineering subject area with 8 + years of experience or a Master’s degree with 6+ years.

• Experience: Experience in the healthcare, medical device, or regulated industry preferred, with a strong preference for candidates with experience in testing and implementing security controls.

• Technical Proficiency:

  • Working knowledge of operating systems, particularly Linux.

  • Familiarity with threat modeling tools like Microsoft STRIDE, malware analysis, and digital forensics.

  • Understanding of modern software development processes and DevOps tools such as Jenkins, Git, and Gerrit.

  • Ability to apply Common Vulnerability Scoring System (CVSS) for vulnerability management.

• Cybersecurity Standards Knowledge: Familiarity with cybersecurity standards such as NIST 800-53, ISO 27001, and FIPS 140-2 is preferred.

• IoT Interest: A strong interest in IoT device development, especially in embedded platform security, device communication protocols, and cryptographic functions.

Why Baxter?

At Baxter, you will be part of a dynamic team that is committed to innovation and excellence in healthcare. We offer a flexible remote work environment, competitive compensation, and comprehensive benefits. Join us in our mission to save and sustain lives, and make a meaningful impact on the future of healthcare.

If you are ready to take on this exciting challenge and contribute to the safety and security of medical devices that improve patient outcomes worldwide, we encourage you to apply today!

US Benefits at Baxter (except for Puerto Rico)

This is where your well-being matters. Baxter offers comprehensive compensation and benefits packages for eligible roles. Our health and well-being benefits include medical and dental coverage that start on day one, as well as insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance. Financial and retirement benefits include the Employee Stock Purchase Plan (ESPP), with the ability to purchase company stock at a discount, and the 401(k) Retirement Savings Plan (RSP), with options for employee contributions and company matching. We also offer Flexible Spending Accounts, educational assistance programs, and time-off benefits such as paid holidays, paid time off ranging from 20 to 35 days based on length of service, family and medical leaves of absence, and paid parental leave. Additional benefits include commuting benefits, the Employee Discount Program, the Employee Assistance Program (EAP), and childcare benefits. Join us and enjoy the competitive compensation and benefits we offer to our employees. For additional information regarding Baxter US Benefits, please speak with your recruiter or visit our Benefits site: Benefits | Baxter

Equal Employment Opportunity

Baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.

Know Your Rights: Workplace Discrimination is Illegal

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.