[Hiring] Principal Cybersecurity Engineer @Bayer

Role Description

The Principal Cybersecurity Engineer will be responsible for:

• Defining project-level cybersecurity requirements.
• Designing and developing security solutions to mitigate product cybersecurity risks.
• Understanding medical device products and clinical applications to identify potential cybersecurity threats and develop mitigations.
• Performing threat modeling, vulnerability testing, security risk analysis, and security assessments.
• Reviewing security architecture and designs.
• Securing medical devices, medical device software, and IT software against cyber threats.
• Leading cybersecurity risk assessments and cyber signal incident responses and investigations.
• Leading cross-functional teams.
• Coordinating strategic supplier and partner relationships.

Qualifications

• Master’s in Cybersecurity, Computer Science, Telecommunications, or closely related field.
• 4 years of experience in cybersecurity-related positions in a medical device R&D environment.

Requirements

• Performing threat modeling of regulated medical devices using STRIDE.
• Assessing cybersecurity risk to patient safety and Protected Health Information (PHI).
• Creating security designs and requirements based on user needs.
• Applying security technologies to medical device product designs within software and hardware, including network security, encryption, firewalls, and TPM.
• Leading cross-functional teams in reviewing security architecture and design.
• Applying cybersecurity standards, including NIST CSF, NIST SP 800-30, AAMI TIR57, and AAMI TIR 97.
• Creating documentation for regulatory submissions, including cybersecurity management plans, threat model reports, security risk and cyber signal assessments, MDS2, and SBOM.
• Applying cybersecurity and secure design principles to medical device products in compliance with FDA Cybersecurity Guidance for Medical Devices.
• Conducting security testing and vulnerability scanning using Burp Suite, Wireshark, and Nessus.
• Analyzing findings with qualitative risk prioritization, including CVSS and OWASP.
• Planning and overseeing penetration testing with third-party testers.
• Developing cybersecurity policies and procedures.

Benefits

• Health care.
• Vision.
• Dental.
• Retirement.
• PTO.
• Sick leave.

Company Description

Bayer Healthcare LLC is an Equal Opportunity Employer/Disabled/Veterans. The company is committed to providing access and reasonable accommodations in its application process for individuals with disabilities and encourages applicants with disabilities to request any needed accommodation(s).