Sr. Cybersecurity Engineer

Working Location: MASSACHUSETTS, WESTBOROUGH 

Workplace Flexibility: Hybrid

 

For more than 100 years, Olympus has focused on making people’s lives healthier, safer and more fulfilling. ​​

​

Every day, we live by our philosophy, True to Life, by advancing medical technologies and elevating the standard of patient care so people everywhere can fulfill their desires, dreams, and lives.

​

Our five Core Values empower us to achieve Our Purpose: 

 

Patient Focus, Integrity, Innovation, Impact and Empathy. 

 

Learn more about Life at Olympus.

 

**Please note: All correspondence will be sent from our Olympus domain (@Olympus.com). If you receive correspondence from an entity other than @Olympus.com, it is likely not legitimate.

 

 

Job Description

The Sr. Cybersecurity Engineer for Medical Devices R&D is responsible for leading and/or supporting the development and implementation of security measures specific to medical device technologies. This role focuses on protecting computer systems, networks, and sensitive data integral to medical device functionality and patient safety. The primary responsibilities include overseeing all phases of cybersecurity initiatives, including identifying and evaluating security threats, defining security requirements tailored to medical devices, and conducting rigorous security verifications and validations. Within a collaborative R&D environment, the Sr. Cybersecurity Engineer is expected to be a proactive communicator, work effectively with cross-functional teams, manage projects efficiently, deliver high-quality and compliant security solutions, and continuously advance their knowledge in both cybersecurity and medical device regulations. This role involves the creation and analysis of security-related data, subsequent reporting, and generating and maintaining comprehensive documentation. A working knowledge of FDA guidelines, cybersecurity frameworks, and best practices specific to medical devices is required. May provide leadership and direction to R&D Technicians.  

Job Duties

• Supports product development teams by participating in the specification, development, verification, and deployment of security measures for new and existing products running Linux or Windows operating systems.
• Assists in proposing solutions and contributing to the technical direction for product security development, ensuring alignment with secure architecture designs.
• Contributes to the development and execution of security plans and product security specifications.
• Conducts vulnerability scans on software under the guidance of lead engineers to identify potential security issues before product release.
• Supports cybersecurity risk management activities, including assisting in threat modeling and vulnerability assessments, and helps implement risk controls based on CVSS scores.
• Participates in design and code reviews to identify potential security vulnerabilities, making appropriate recommendations.
• Assists development teams in the initial stages of penetration and fuzz testing for new products containing software components.
• Helps implement security configurations within products and the supporting infrastructure.
• Assists in drafting customer-facing product security documents, such as MDS2 forms, under supervision.
• Provides support on product security issues escalated to the engineering team.
• Contributes to raising awareness of security concerns and helps share best engineering practices within the team.
• Assists in maintaining and updating facility-level procedures and work instructions for the cybersecurity program.
• Supports the response efforts to lower-level cybersecurity incidents.
• Works with product teams to implement and verify security measures by offering guidance, assisting with establishing measures, and using suitable tools.
• Encourages improvements in security-related proc