Job Title: Cybersecurity Sr. Specialist

Duration: 3 Months

Location: One St Jude Medical Drive, St. Paul,MN- 55117

PR: 47$/hr on W2

The Cybersecurity Sr. Specialist support cybersecurity operations by designing, developing or recommending secure technical solutions, including policy, standards, applications, systems, architectures, and infrastructure that are operationally viable and efficient.

Ensure appropriate application of security products and technologies to protect the organizations systems and information and enable achievement of the organization’s objectives.

Manage and design innovative integration of cybersecurity toolsets to enable more automated discovery, remediation, and alerting of network and device vulnerabilities, as a means of improving the security posture.

Perform analysis of emerging technologies and design and build architectures and solutions to enable secure implementation of new technologies.

Assist in product category systems
Product: pacemakers, lab equipment’s, etc.
Education: BS degree
Experience – 3-5 on cybersecurity, IT Risk, Development security
Embedded with the product team
Complete threat modelling
Product security, consumer and ecommerce
JAVA scrip with some python
Monitoring various security teams
Technical background with embedded and medical device and ecommerce experience
Familiarity with FDA pre and post market guidance will be helpful
Develop a risk-based cyber security program which meets regulatory requirements and aligns with industry leading information security practices.

Top Skills

Threat modeling
Security architecture
Vulnerability management

Duties:

Develop a risk-based cyber security program which meets regulatory requirements and aligns with industry leading information security practices.
Perform threat identification and mitigation activities using industry leading security controls and tools sets.
Advance the Company’s cyber threat and vulnerability management program to ensure consistent identification, analysis, response, and monitoring of cyber security threats, events, and vulnerabilities. Assess threats to the business and deploy countermeasures for those threats.
Collaborate with business units, application development teams, and third-party vendors to achieve program requirements while enabling the business.
Apply technical knowledge to protect the Company against cyber threats (e.g., knowledge of firewalls, intrusion detection and prevention systems, data loss prevention solutions, endpoint protections, log aggregation technology and other leading-edge security technologies).
Facilitate cross team coordination to achieve defined security goals as well as meet technical requirements in support of detailed implementation plans for security projects.
Manage security projects to ensure the timely, on budget, and effective implementation of cyber security improvements that are operationally supported with validation methods in place to measure effectiveness.
Perform assessment of cyber security incidents to identify the root cause, respond, and recover the environment.
Develop strategies, policy and standards to protect company information and technology assets.
Manage capital and operational expense budgets to ensure accurate forecasting and administration.

Required:

At least 5 years of experience but typically 7 plus years of experience is required.
Possess expertise in valuing and implementing industry standards such as the ISO 27001/2, SOC 2, HITRUST and FedRAMP Information Security standard and the ISO 22301 Business Continuity Standard. Experience with implementation and operational use of GRC toolsets (Governance Risk and Compliance).
Possess CISSP certification (or similar) and be knowledge of national and international regulatory compliances and frameworks such as ISO, SOX, BASEL II, EU DPD, HIPAA, and PCI DSS.

Core responsibilities of this job are:

Advise on cyber risks during mobile and/or cloud-based product development
Ensure that development teams adhere to industry cybersecurity requirements
Perform threat modeling during the development of Abbott products
Leverage cyber testing results to evaluate the security posture of Abbott products
Advise teams regarding the prioritization and remediation of security deficiencies
Communicate important product security concerns to leadership as appropriate

About you:

5+ years in a technical advisory role within cybersecurity, or as a product engineer with a cybersecurity focus
Professional experience with of one or more of the following:
Advising on cloud computing architectures and associated security design challenges
Advising on cloud application development and associated security design challenges
Advising on mobile application development and associated security design challenges
Experience performing cyber threat modelling using industry frameworks (e.g, STRIDE, PASTA)
Strong understanding of information security fundamentals and defense-in-depth practices
Ability to build relationships, influence without authority, and drive positive outcomes across multiple stakeholder groups
Ability to provide clear oral and written communication to a variety of business and technical audiences
Proven problem-solving experience
Ability to prioritize work and adapt to changing needs in a dynamic work environment
University degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related discipline
Familiarity with medical device industry cybersecurity frameworks preferred

Infinite Computing Systems jobs

Cyber Security Analyst