Principal Cybersecurity Engineer

Fresenius Kabi USA

. Advance secure product development practices across medical device software and connected technology platforms .

Posted 10/28/2026full-timeNorth Andover • Massachusetts • United StatesLead💰 $145,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity practices for medical devices, including threat modeling, vulnerability management, and regulatory compliance. Proficient in secure software development lifecycle methodologies and capable of leading security architecture and risk management initiatives.

Highest-signal resume keywords

Cybersecurity Risk ManagementThreat ModelingDevSecOps ImplementationVulnerability AssessmentFDA Cybersecurity Guidance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecuritySoftware EngineeringSecurity ArchitectureVulnerability ManagementStatic Analysis (SAST)Dynamic Analysis (DAST)Software Composition Analysis (SCA)Cybersecurity Penetration TestingRegulatory ComplianceEmbedded Medical Device Software

Soft Skills

Problem-SolvingAnalytical SkillsAttention to DetailCommunication SkillsTeam Collaboration

Tools & Technologies

Cloud SecuritySecure CI/CD PipelinesKey ManagementSecure Software Design PatternsAutomated Security Testing

Industry Keywords

Medical Device DevelopmentISO 14971IEC 62304IEC 81001-5-1Cybersecurity Standards

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Advance secure product development practices across medical device software and connected technology platforms
Provide leadership in security architecture, threat modeling, cybersecurity risk management, DevSecOps, vulnerability management, and regulatory compliance
Partner with engineering, quality, regulatory, and product development teams throughout the product lifecycle
Conceptualize secure methodologies and improve product cybersecurity processes and best practices for IMS and LVP products
Develop and implement cybersecure solutions to complex problems
Analyze, plan, design, execute, and document security for complex software applications and processes within medical product design controls
Plan and perform manual and automated security testing for new features, enhancements, and defect fixes
Lead secure design reviews, security requirements definition, and security architecture reviews
Provide technical direction for authentication, authorization, encryption, secure communications, key management, cloud security, and secure software design patterns
Participate in Coordinated Vulnerability Disclosure, PSIRT processes, vulnerability investigations, and post-market cybersecurity activities
Develop and maintain product threat models using STRIDE, attack trees, abuse cases, and adversarial analysis
Maintain cybersecurity standard operating procedures and recommend continuous process improvements for regulatory compliance
Conduct ongoing vulnerability scanning and risk evaluations
Support and advance Secure Software Development Lifecycle practices
Drive DevSecOps implementation, including automated security testing, policy enforcement, SBOM generation, vulnerability management, and secure CI/CD pipelines
Guide secure coding practices and vulnerability remediation throughout the software development lifecycle
Improve cybersecurity engineering process efficiency with senior leadership
Identify cybersecurity coverage needs and high-risk areas with global internal and external staff
Mentor and guide junior staff and provide technical input on architecture and design decisions
Remain a hands-on individual contributor and may supervise or direct lower-level engineers
Develop and maintain technical records and detailed documentation for internal and external stakeholders

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity or related Engineering is required
8+ years of experience in cybersecurity, software engineering, product security, or a related technical discipline, including experience applying cybersecurity practices to software-based products
Demonstrated experience applying FDA cybersecurity guidance, IEC 81001-5-1, IEC 62304, ISO 14971, and related cybersecurity standards within regulated medical device development environments
Experience conducting cybersecurity risk assessments and supporting risk management activities in accordance with ISO 14971
Experience with vulnerability assessment and management, SBOM governance, security analysis, and threat modeling is required
Experience applying cybersecurity principles to embedded medical device software and/or web applications
Current knowledge of the evolving cybersecurity landscape and its applicability to medical devices
Experience applying cybersecurity principles to on-premises and cloud-based systems, including web applications, APIs, containerized workloads, and hybrid architectures
Experience planning and executing cybersecurity penetration testing activities
Experience with Static Analysis (SAST), Dynamic Analysis (DAST), and Software Composition Analysis (SCA)
Ability to work as a collaborative team member
Advanced problem-solving, analytical, troubleshooting, and debugging skills
Strong attention to detail and methodical approach
Excellent written and verbal communication skills
Must be authorized to work for any employer in the United States; employment visa sponsorship is unavailable
Must be able to effectively speak, read, write, and understand English

Benefits

Comp & perks

Bonus plan with a target of 10% of base salary
401(k) plan with company contributions
Paid vacation
Holiday and personal days
Employee assistance program
Medical coverage
Prescription drug coverage
Dental coverage
Vision coverage
Life insurance
Disability coverage
Wellness program