Software Cybersecurity Engineer
JOB DESCRIPTION:
Working at Abbott
At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:
Career development with an international company where you can grow the career you dream of.
Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
An excellent retirement savings plan with a high employer contribution.
Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.
A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
A company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.
The Opportunity
The SoftwareCybersecurity Engineer works on site in our San Diego, CA location in Abbott Rapid Diagnostics, on our Infectious Diseases team. This role is on site daily.
Our diagnostic solutions are used in hospitals, laboratories, and clinics around the globe. The crucial information derived from our tests, instruments, and informatics systems is often the first step in patient care decision-making for hundreds of health conditions from heart attacks to blood disorders to infectious diseases and cancers.
We’re excited to share a highly rewarding and hands-on opportunity for a skilled and experienced SoftwareCybersecurity Engineer to join our growing team. As part of our team, you will be responsible for cloud cybersecurity, penetration testing, vulnerability assessments, and reporting findings to help detect bleeding-edge security vulnerabilities in Azure Cloud environment.
What You’ll Work On
The person hired will help keep Abbott's cloud systems, software, and medical devices secure from hackers and cyber threats. They will also work with IT and software development teams to find security weaknesses, determine potential risks, and make sure problems are fixed before products are released.
On a daily basis, they will review system security, perform testing to uncover vulnerabilities, help developers build safer software, and ensure products meet healthcare and regulatory security requirements. They will also create reports and documentation that prove products are secure and compliant.
The role requires experience with cloud technologies, operating systems (Windows and Linux), web applications, coding/scripting, and cybersecurity tools. They will also use AI-powered tools and automation to speed up security reviews, analyze vulnerabilities, generate documentation, and improve overall cybersecurity processes. Additionally, they may occasionally speak with customers or leadership teams to explain security risks, requirements, and solutions.
If hired, the successful person will do the following:
Designs, implements, and validates cybersecurity controls for cloud-based applications, software products, and connected medical devices. Identifies and assesses security risks, vulnerabilities, and emerging threats, driving remediation strategies that ensure products remain secure, compliant, and aligned with industry and regulatory cybersecurity requirements.
Independently leads complex cybersecurity initiatives, delivering release-ready security artifacts, conducting technical security reviews with engineering teams, and translating vulnerability findings into actionable, business-focused risk insights for technical and leadership stakeholders. Leverages automation and AI-enabled tools to improve security assessment, risk analysis, and compliance outcomes.
The role also advances the team's use of AI and agentic automation to accelerate and improve the quality of cybersecurity deliverables.
Work closely with corporateexternal penetration testing team to identify vulnerabilities and find mitigations and resolutions.
Identify and assess vulnerabilities in systems and applications. This includes utilizing manual and automated testing methods to find and exploit code flaws, misconfigurations, and insecure software.
Keep cybersecurity training and knowledge current by monitoring the latest security threats and vulnerabilities. Provide recommendations for remediation of identified vulnerabilities.
Develop and deliver cybersecurity artifacts for product software releases, including SBOMs, vulnerability remediation evidence, threat models, and release security documentation; lead technical reviews with development teams on vulnerabilities, security controls, remediation progress, and residual risk.
Design and recommend systematic remediation strategies and preventive controls to reduce recurring vulnerabilities, including secure coding practices, dependency management, and configuration hardening across product and supporting applications.
Occasionally join senior leaders or stakeholders on client kick-off and discovery sessions to answer questions from prospects and clients.
Provide information security expertise and assist in incorporating control measures into new and existing projects around medical device security. Assist with performing risk assessments of existing and new Abbott cloud systems and medical devices.
Design and development of security strategies for cloud-based applications including hardening, incident response, pen testing, and disaster recovery.
Perform all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
Apply in-depth knowledge of user authentication, certificate management, digital signatures, and cloud security architecture.
Demonstrate commitment to the development, implementation and effectiveness of the Quality Management System per ISO, FDA, and other regulatory agencies.
Use your knowledge of programming languages such as Python, JavaScript, React
Use AI-assisted development tools (e.g., GitHub Copilot and other LLM-based code assistants) to write, review, and secure code more efficiently.
Lean on your knowledge of web application security, including experience with web application scanners and manual testing techniques.
Apply familiarity with AI-powered cybersecurity tools (e.g., AI-assisted threat detection, vulnerability triage, and log analysis), validating results for accuracy and safety.
Apply AI to cybersecurity deliverables to improve speed and quality - e.g., AI-assisted vulnerability triage and deduplication, SBOM and CVE analysis, drafting of security documentation and remediation evidence, and summarizing findings into risk insights.
Maintain working familiarity with current and emerging AI tools and copilots, and evaluate them for safe, policy-compliant use in security workflows.
Build, configure, and modify agentic AI applications (AI agents, Skills/Automations, and MCP servers) that automate cybersecurity deliverables such as scan-result analysis, evidence collection, dashboarding, and remediation tracking - with appropriate guardrails, human review, and data-handling controls.
Promote responsible and secure AI use, including awareness of AI/LLM-specific risks (e.g., prompt injection, data leakage, model/supply-chain risk) in both Abbott products and internal security tooling.
Required Qualifications:
Associate's degree and 7 years of relevant experience.
Preferred Qualifications:
Minimum 5 years (7+ preferred) in cybersecurity, product security, IT security, or related experience, with a strong preference for product security (consumer-facing applications and services) and hands-on engineering.
Bachelor's degree or higher Education
Demonstrated hands-on experience conducting web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, SBOM generation tooling, and network- and agent-based vulnerability scanning tools.
Holds or working toward one or more relevant certifications - e.g., CISSP, CISA, CISM, CCSP, or CEH (or equivalent).
Preferred: prior product-development cybersecurity role; familiarity with diagnostic equipment, medical devices, or closely related products.
Advanced experience applying AI into everyday tasks, including utilizing AI Skills and Automations, AI agents, and MCP servers; ability to build and modify agents that produce or support cybersecurity deliverables.
Familiarity with new and emerging AI tools/copilots and the judgment to adopt them securely and in line with policy.
Understanding of ISO 27001 and NIST cybersecurity frameworks; experience with audit and certification processes.
Strong analytical and critical-thinking skills, sound judgment, and the ability to work independently on complex tasks in an environment with changing priorities.
Excellent documentation, oral, and written communication skills for interaction with all levels of management and staff, including the ability to communicate business risk as it relates to cybersecurity.
Strong team player able to communicate effectively within cross-functional groups and perform peer reviews of work products and documents.
Learn more about our health and wellness benefits, which provide the security to help you and your family live full lives: https://abbottbenefits.com/
Follow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity.
Connect with us at abbott.com, on LinkedIn at https://www.linkedin.com/company/abbott-/, and on Facebook at https://www.facebook.com/AbbottCareers.
The base pay for this position is
$100,000.00 - $200,000.00In specific locations, the pay range may vary from the range posted.