Staff Cyber Security Engineer

JOB DESCRIPTION:

About Abbott

Abbott is a global healthcare leader, creating breakthrough science to improve people’s health. We’re always looking towards the future, anticipating changes in medical science and technology.

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Free medical coverage for employees* via the Health Investment Plan (HIP) PPO
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement, the Freedom 2 Savestudent debt program and FreeU education benefit - an affordable andconvenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

This position works out of our Sylmar, CA location or Remote in the Cardiac Rhythm Management division. As a global leader in Cardiac Rhythm Technologies, we focus on innovative technologies that can improve the way doctors treat people with heart arrhythmias, or irregular heartbeats. As the Staff Cyber Security Engineer, you’ll Be on the front lines of the emerging area of medical device cybersecurity manufacturing as an integral member and technical leader within a team responsible for creating, deploying, and monitoring cybersecurity and information security solutions for medical devices. Interact with external and internal cybersecurity researchers to identify and remediate vulnerabilities within products and manufacturing systems. Work directly with R&D and Information Technology teams to ensure all relevant security risks are identified and evaluated, and appropriate and well-balanced solutions are implemented. Develop project security management deliverablesfor regulatory bodies to comply with standards/guidance documents, create and implement plans to address new standards/guidance, and successfully communicate cybersecurity technology to customers, regulatory bodies, and other stakeholders.

What You’ll Work On

• Lead and perform product manufacturing cybersecurity-related activities ranging from incident response to vulnerabilityassessments to mitigation implementation.
• Develop and perform manufacturing intrusion detection activities.
• Lead manufacturing risk assessments in conjunction with product R&D teams and develop and recommend specific securitycontrols for product/system wide security needs. Ensure recommended security controls are feasible forembedded/constrained environments, including prototyping where appropriate.
• Participate in the creation and testing of product manufacturing security-related requirements and processes.
• Evaluate and test security risks on programs across the entire development life cycle, including market-released product.
• Manage security-related deliverables for regulatory bodies, ensuring compliance with key standards / guidance documents.
• Work with third party manufacturers to ensure appropriate manufacturing cybersecurity processes are in place.
• Contribute to the understanding of current industry best practices and how they can be applied to the CRM Products.
• Develop advanced technical ideas and guide their development into final product.
• Execute/ Assist activities to sustain/ develop internal and external partner security testing capabilities in alignment with testingstrategies.
• Maintain a high level of technical knowledge on security.
• Champion consistent implementation of the Security Development Life cycle across projects
• Responsibilities may include the following and other duties may be assigned:
• Designs, develops, tests, debugs and implements software and software tools.
• Determines systems software design requirements.
• Ensures that system improvements are successfully implemented and monitored to increase efficiency.
• Generates systems software engineering policies, standards and procedures.

Required Qualifications

• Bachelor’s in engineering or sciences

Required Qualifications

• 7+ years of related experience with BS Degree in Engineering or Sciences
• 5+ years of related experience with MS Degree in Engineering or Sciences
• Experience as an analyst, engineer, developer, or architect with core cybersecurity responsibility and knowledge in two or more of the following areas:
  • IoT (embedded) devices and systems
  • Cloud systems architecture and security
  • Enterprise and local network infrastructure security
  • Large-scale application architecture and security