• Performs cybersecurity engineering functions within a scheduled timeframe and performance criteria.
• Identify areas to improve our product to better align with FDA cybersecurity guidance and standards such as NIST Risk Management Framework, UL 2900, AAMI TIR 57, and Joint Security Plan (JSP).
• Review corporate cybersecurity guidelines and incorporate them into process and development efforts for our group. Identify opportunities for modifications to the software applications to improve the cybersecurity threat protection profile.
• Assist with efforts to create SBOMs for several software components and establish ongoing surveillance techniques. Evaluate tools to assist with this effort.
• Assist with efforts to establish penetration testing suites for continuous testing and monitoring of our product solution.
• Assist with efforts to establish a software update process to test and deploy Windows OS security patches.
• Provide SecureLink support in terms of customer requirements for connecting and addressing cybersecurity concerns.
• Provide overall guidance and answer customer questions regarding cybersecurity concerns with the deployment of our product solution.
• Support Remote Diagnostic efforts by defining cybersecurity mitigations for connecting remotely to customers using IoT agents and Azure infrastructure.
• Engineering documentation: Responsible for engineering documentation of software specifications, designs, modifications, and technical procedures.

Qualifications

• Position is based in Marlborough, MA. In-office work of 50% or greater is preferred.
• Thorough familiarity with FDA Cybersecurity Guidelines and cybersecurity standards such as NIST Risk Management Framework, UL 2900, AAMI TIR 57, and Joint Security Plan (JSP).
• Ability to evaluate and define cybersecurity solutions.
• Ability to communicate effectively & constructively.
• Ability to work independently on all tasks.
• Strong interpersonal skills.
• Thorough familiarity with Windows operating system is required.
• Software engineering skills are desired.
• Knowledge of cloud-based software development and deployment is desired.

Experience

• Minimum of 8 years professional experience in network/software/cybersecurity development.
• Skilled in writing design documentation and operating procedures.
• Experience working in an FDA regulated environment is a plus.

Education

• BS/BA required in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.