Principal Engineer, Product Cybersecurity (Hybrid)

This is where you save and sustain lives

At Baxter, we are deeply connected by our mission. No matter your role at Baxter, your work makes a positive impact on people around the world. You’ll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients. 

Baxter’s products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.

Together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work. 

Join us at the intersection of saving and sustaining lives— where your purpose accelerates our mission. 

Your Role at Baxter

This is where your work saves lives.

As Senior Principal Engineer, own and direct the cybersecurity design and analysis of multiple medical devices. Demonstrate subject matter expert knowledge in state-of-the-art security principles.Resolve difficult problems, from conception to final design with team input. Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance.

Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan. Utilizes solid understanding of device and system connectivity concepts in a medical device domain. Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables. Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.

What you'll be doing:

• Implement proof of concept project to define innovative solutions on platforms/server platforms

• Lead implementation of medical device cybersecurity principles as part of an overall security architecture

• Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted.

• Create threat models of medical device systems and the interfaces between medical devices.

• Perform vulnerability scanning of medical device systems and analyze results.

• Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions.

• Drive cybersecurity improvements through product the cross functional teams, primarily software.

• Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service).

• Ensure compliance to the product development process and Quality System and Design Control requirements.

• Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met.

• Contribute to external communications (bulletins, FAQs, etc.) related to cybersecurity.

What you'll bring

• BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years.

• Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis.

• Experience with cybersecurity related software such as Blackduck, Coverity, etc.

• Experience dealing with threat intelligence, CWEs and CVEs.

• Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.

• Experience with cybersecurity functionality on embedded systems and hosted software applications.

• Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel.

• Ability to convince management on courses of action with minimal assistance using both written and verbal methods.

• Must be able to provide solutions that reflect understanding business objectives.

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

Baxter is committed to supporting the needs for flexibility in the workplace. We do so through our flexible workplace policy which includes a minimum of 3 days a week onsite. This policy provides the benefits of connecting and collaborating in-person in support of our Mission.

We understand compensation is an important factor as you consider the next step in your career. At Baxter, we are committed to equitable pay for all employees, and we strive to be more transparent with our pay practices. The estimated base salary for this position is $112,000 to $154,000 annually. The estimated range is meant to reflect an anticipated salary range for the position. We may pay more or less than of the anticipated range based upon market data and other factors, all of which are subject to change. Individual pay is based on upon location, skills and expertise, experience, and other relevant factors. This position may also be eligible for discretionary bonuses. For questions about this, our pay philosophy, and available benefits, please speak to the recruiter if you decide to apply and are selected for an interview.

#LI-MS1

Equal Employment Opportunity

Baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.

EEO is the Law 
EEO is the law - Poster Supplement
Pay Transparency Policy

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.