Job Description

Additional Locations: India-Maharashtra, Pune

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we\xe2\x80\x99ll give you the opportunity to harness all that\xe2\x80\x99s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we\xe2\x80\x99ll help you in advancing your skills and career. Here, you\xe2\x80\x99ll be supported in progressing \xe2\x80\x93 whatever your ambitions.

Independently or as a member of team; design and develop cybersecurity assessment plan and assess cybersecurity reports for security related issues. Responsible for ensuring all aspects of cybersecurity are covered and satisfied.

• Documents product cybersecurity reports, threat modeling.
• Analyzes, evaluates, verifies vulnerability analysis by using cybersecurity tools and practices.
• Continuously improves processes and cybersecurity assessment work methodologies by interfacing with peers/cross-functional groups and analyzing activities to improve workflow and work processes.

• Required skills:

• 8+ years of overall industry experience
• 5+ years of cybersecurity and vulnerability analysis experience
• CVE knowledge and Vulnerability assessments tools like Mend or similar tools
• SWBoM creation and vulnerabilities analysis (Tools \xe2\x80\x93 Mend or similar, cyclonDX)
• Understands PKI, certificate signing, BIOS \xe2\x80\x93 secure boot and bootloader validation, code signing.
• Knowledge of hashing and encryption algorithms
• Threat modeling tools (STRIDE / Owasp etc.)
• Pen testing \xe2\x80\x93 scoping / review results and recommendations
• Product documentation for cybersecurity \xe2\x80\x93 TM, security risks assessments, security test plan and reports
• Comfortable with NIST, NVD CVE scoring
• Good communication & interpersonal skills

• Preferred experience:

• Understands and reviews security architecture for the product
• 510K submissions / new FDA guidelines (nice to have not required)
• Firmware, medical device or IoT \xe2\x80\x93 some exposure
• Security testing and tools experience (Jira, Windchill)

In all actions, demonstrates a primary commitment to product security and safety quality by maintaining compliance to the security and quality policy and all other documented quality processes and procedures.

Requisition ID: 573821

As a leader in medical science for more than 40 years, we are committed to solving the challenges that matter most \xe2\x80\x93 united by a deep caring for human life. Our mission to advance science for life is about transforming lives through innovative medical solutions that improve patient lives, create value for our customers, and support our employees and the communities in which we operate. Now more than ever, we have a responsibility to apply those values to everything we do \xe2\x80\x93 as a global business and as a global corporate citizen.

So, choosing a career with Boston Scientific (NYSE: BSX) isn\xe2\x80\x99t just business, it\xe2\x80\x99s personal. And if you\xe2\x80\x99re a natural problem-solver with the imagination, determination, and spirit to make a meaningful difference to people worldwide, we encourage you to apply and look forward to connecting with you!

Boston Scientific