Product Cybersecurity Engineer Fellow

Additional Location(s):  N/A

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.           

 

About the Role:
Boston Scientific is seeking a Product Cybersecurity Engineer Fellow. In this role, the candidate will serve as a strategic leader and subject matter expert, driving the design, implementation, and governance of robust cybersecurity frameworks to ensure the safety, reliability, and compliance of medical devices, including both capital equipment and active implantable products. The candidate will be responsible for operationalizing and supporting various cybersecurity activities, including understanding and documenting the security posture of the company’s products and applications, implementing cybersecurity plans, supporting infrastructure, and ensuring compliance with quality systems and processes.

 

The candidate must possess a combination of strong communication and technical skills to implement and support the functional and technical aspects of the cybersecurity plan. They will work collaboratively with a team of internal staff and consultants to execute its components. You will collaborate across multidisciplinary teams to address complex cybersecurity challenges in highly regulated environments and play a pivotal role in shaping the future of connected healthcare solutions.

 

This role is part of the Urology Research and Development organization. Working alongside a team of analysts, IT/R&D engineers, and architects, the Cybersecurity Engineer will support pre- and post-market product security activities such as application security, vulnerability assessments, threat modeling, penetration testing, security analysis tools, hospital cybersecurity inquiries, and contract reviews, among other areas.

 

Work Mode:
At Boston Scientific, we value collaboration and synergy. This role is remote, but candidates must reside in the Central Time Zone and work Central Time Zone hours. If the candidate lives within a commutable distance to our Maple Grove, MN, office location, they will be expected to follow a hybrid schedule of a minimum of three days onsite per week.

 

Relocation Assistance:
Relocation assistance is not available for this position at this time.

 

Visa Sponsorship:
Boston Scientific will not offer sponsorship or take over sponsorship of an employment visa for this position at this time.

 

This position will accept applications through January 20th, 2025.

Your Responsibilities Will Include:

• Define and lead the Urology product(s) cybersecurity strategy for medical devices, ensuring alignment with industry regulations and best practices.
• Provide guidance to the teams on emerging threats, evolving standards, and technology trends in the cybersecurity and healthcare ecosystem.
• Develop and oversee risk assessment methodologies, including security assessments, threat modeling, vulnerability assessments, and penetration testing.
• Ensure risk mitigation strategies are effectively implemented during the product lifecycle, from concept to post-market surveillance.
• Advocate for a “secure by design” approach to minimize risks across interconnected medical devices and healthcare IT systems.
• Provide technical leadership and support to design and implement end-to-end system security architectures, including secure boot, encryption, authentication, and intrusion detection systems.
• Support the development of software and firmware solutions with secure coding principles.
• Work closely with R&D, quality assurance, IT, and clinical teams to embed cybersecurity into the device development process.
• Mentor junior engineers and provide training on advanced cybersecurity principles.
• Act as a liaison with external stakeholders, including regulatory bodies, standards organiza