Product Cybersecurity Specialist

Baxter Healthcare’s mission is to save and sustain lives by delivering products and services that are the crucial building blocks of healthcare. Also meaningful to Baxter is ensuring the safety and security of its medical devices. Baxter is seeking a Medical Device Cybersecurity Engineer, whose main responsibility is to ensure the safety and security of the global corporation's medical devices, products, and applications. The candidate will perform powerful medical device cybersecurity pre-market threat analysis and risk assessment. The candidate will help ensure that cybersecurity is an integral component throughout the product development. The candidate must have an excellent combination of software development skills and knowledge in security principles to prioritize the functional/technical aspects of the solution, and then help the product teams to implement the implementation. This role will work with a team of engineers, architects, and analysts cross multiple organizations, supporting cybersecurity feature prototyping, threat analysis, and penetration test finding/vulnerability assessment. Accountable for defining and implementing the Cybersecurity strategy across Digital solutions and technical services portfolio. Provide leadership, strategic mentorship and multi-functionally collaborate with GBUs to architect, design and develop the software security features for multiple products and platforms. Implement innovative security solutions for platforms and/or server platforms. Lead implementation of medical device cybersecurity functionalities that are part of an overall security architecture, including common security protocol stacks such as IPsec, TLS, OAuth, and SAML. Model cybersecurity threats using tools such as STRIDE, and assess risks using CVSS. Assess security findings from various sources. This includes Static Code Analysis and Penetration Testing. Identify known/unknown vulnerabilities associated with Baxter’s medical devices and provide inputs/technical expertise to multiple teams to eliminate/mitigate identified cybersecurity risks. Develop security tools that help to collect cyber threat intelligence, supervise emerging vulnerabilities in software, and implement secure coding standards. Support medical device cybersecurity certification programs such as UL 2900. Perform internal security tests to validate security capabilities and compliance for medical devices. Work with internal or external resources to plan and implement Security Activities (like Penetration Testing) on various products. Maintain relationships with strategic partners in this space to ensure Baxter development process with respect to Cybersecurity, is industry leading, Top Quartile. Work with ministries of health, and certifying bodies to represent the company and devices in threat analysis, certification and notifications.