{"id":66839,"url":"https://alion.io/job/abbott-staff-product-security-engineer","title":"Staff Product Security Engineer","company":{"id":2710,"name":"Abbott","domain":"abbott.com","url":"https://alion.io/company/abbott","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":98,"open_postings":147,"ghost_share":0.007,"stale_share":0.252,"repost_share":0.048,"time_to_fill_p50_days":15,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Paul, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":99300,"max":198700,"currency":"USD","period":"year","gross":null,"usd_annual":198700},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"CVE","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"RTOS","optional":false},{"name":"SBOM","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"GDPR","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-08-20T00:00:00Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-17T06:39:34Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ghost","repost_count":3,"flags":["repost"],"days_open":58},"description":"Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.JOB DESCRIPTION:\nWorking at Abbott\nAt Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:\nCareer development with an international company where you can grow the career you dream of.\nEmployees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.\nAn excellent retirement savings plan with a high employer contribution\nTuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.\nA company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.\nA company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.\nThe Opportunity\nAt Abbott, we develop life-changing technologies that improve patient outcomes around the world. We are seeking a Senior Product Cybersecurity Engineer who combines strong technical expertise with excellent communication and collaboration skills to help secure next-generation connected medical devices.\nThis position is part of our EP division and will be located onsite at our Tech Center in St. Paul, MN.\nIn this role, you will serve as a cybersecurity leader across the product lifecycle, partnering with software, firmware, hardware, systems engineering, quality, regulatory, and product management teams to ensure security is designed into products from concept through deployment and sustainment.\nThe ideal candidate is a hands-on technical expert in embedded systems, firmware, hardware security, threat modeling, vulnerability management, and security architecture who can also effectively communicate cybersecurity risks, strategies, and compliance requirements to internal stakeholders, customers, auditors, and regulatory agencies.\nWhat You’ll Work On\nCybersecurity Architecture & Secure Product Design\nLead cybersecurity architecture reviews and security-by-design initiatives for connected and embedded medical devices.\nDrive design discussions and ensure security considerations are incorporated into product architecture, development, and deployment decisions.\nDesign and evaluate secure boot architectures, hardware roots of trust, device identity frameworks, code-signing solutions, certificate management, and secure firmware update mechanisms.\nCreate, review, and maintain security architecture documentation, design specifications, and cybersecurity reports.\nCollaborate with cross-functional engineering teams to implement secure design practices across software, firmware, hardware, and cloud-connected systems.\nEmbedded Firmware & Hardware Security\nDevelop and review security controls implemented in C/C++, Python, Linux-based systems, and embedded platforms.\nAssess embedded firmware, operating systems, bootloaders, and hardware platforms for potential security weaknesses.\nReview and validate:Secure boot implementations\nFirmware authentication and validation\nCryptographic services\nPKI and certificate management\nSecure key storage\nSecure provisioning processes\n\nEvaluate hardware security controls, including:Trusted Platform Modules (TPMs)\nSecure Elements\nHardware Security Modules (HSMs)\nTrusted Execution Environments (TEEs)\nJTAG/SWD protection\nAnti-tamper technologies\n\nThreat Modeling & Risk Management\nConduct threat modeling using STRIDE, OWASP, Attack Trees, and similar methodologies.\nIdentify threats and vulnerabilities impacting patient safety, product integrity, and data protection.\nPerform cybersecurity risk assessments and document risks in accordance with company and regulatory requirements.\nAssess CVEs, evaluate product exposure, and recommend mitigation strategies.\nMaintain and review Software Bills of Materials (SBOMs) and support vulnerability management processes.\nSecurity Testing & Validation\nDevelop and execute cybersecurity assessment plans and security test strategies.\nSupport or coordinate penetration testing, fuzz testing, firmware analysis, and vulnerability assessments.\nReview internal and third-party security findings and drive remediation efforts.\nDefine security acceptance criteria and support secure product releases.\nValidate compliance with established cybersecurity requirements and standards.\nRegulatory, Customer & External Engagement\nPartner with Regulatory Affairs, Quality, and Product Security teams to support cybersecurity submissions and compliance activities.\nPrepare and present cybersecurity documentation for customers, auditors, and regulatory agencies.\nServe as a cybersecurity subject matter expert during customer discussions, security assessments, and audits.\nClearly communicate technical risks, mitigation strategies, and compliance status to both technical and non-technical audiences.\nSupport responses to customer cybersecurity questionnaires and security requirements.\nLeadership & Collaboration\nProvide technical leadership and mentoring to engineering teams.\nInfluence stakeholders across engineering, quality, product management, regulatory, and executive leadership functions.\nDrive continuous improvement of cybersecurity processes, assessment methodologies, and engineering practices.\nFoster a culture of collaboration, accountability, and secure product development.\nRequired Qualifications\nBachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, Software Engineering, Cybersecurity, or related discipline.\n8+ years of experience in cybersecurity engineering, product security, embedded systems, or related fields.\n5+ years of hands-on experience securing embedded devices, firmware, medical devices, or IoT products.\nStrong knowledge of:Secure Boot\nHardware Root of Trust\nCode Signing\nPKI and Certificate Management\nCryptographic Key Management\nFirmware Authentication and Validation\nVulnerability Assessment and Remediation\n\nExperience with:Threat Modeling (STRIDE, OWASP)\nSBOM generation and analysis\nCVE management and NVD scoring\nPenetration testing and security assessments\nLinux administration and embedded platforms\n\nProgramming experience in C/C++, Python, Shell scripting, or similar languages.\nFamiliarity with ARM-based processors, embedded Linux, RTOS environments, and connected device architectures.\nStrong written communication and technical documentation skills.\nProven ability to explain complex cybersecurity concepts to engineers, business leaders, customers, and regulators.\nPreferred Qualifications\nExperience in medical devices, healthcare technology, or other highly regulated industries.\nKnowledge of:FDA Cybersecurity Guidance\nIEC 62304\nISO 14971\nISO 27001\nUL 2900\nAAMI TIR57/TIR97\nNIST Cybersecurity Framework\nNIST SP 800-53\nHIPAA and GDPR\n\nExperience with NXP i.MX platforms, Wind River/VxWorks, Secure Elements, TPM technologies, and hardware security testing.\nFamiliarity with hardware attack techniques including fault injection, voltage glitching, side-channel analysis, and physical tampering assessments.\nExperience interacting directly with customers, assessors, auditors, and regulatory agencies.\nSuccess Profile\nThe ideal candidate is a technically strong cybersecurity engineer who can:\nArchitect and validate secure embedded systems.\nLead technical discussions and influence design decisions.\nTranslate cybersecurity risks into business and regulatory impacts.\nBuild trusted relationships with engineering teams, customers, and regulators.\nCommunicate confidently with audiences ranging from developers to executive leadership.\nApply Now\nLearn more about our health and wellness benefits, which provide the security to help you and your family live full lives:www.abbottbenefits.com\nFollow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity.\nConnect with us at www.abbott.com, on Facebook at www.facebook.com/Abbott, and on Twitter @AbbottNews.\nThe base pay for this position is\n$99,300.00 - $198,700.00In specific locations, the pay range may vary from the range posted.\nJOB FAMILY:\nProduct DevelopmentDIVISION:\nEP ElectrophysiologyLOCATION:\nUnited States > Minnesota > St. Paul > Tech Center : One St Jude Medical DriveADDITIONAL LOCATIONS:\nWORK SHIFT:\nStandardTRAVEL:\nYes, 10 % of the TimeMEDICAL SURVEILLANCE:\nNoSIGNIFICANT WORK ACTIVITIES:\nContinuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day), Continuous standing for prolonged periods (more than 2 consecutive hours in an 8 hour day), Keyboard use (greater or equal to 50% of the workday)Abbott is an Equal Opportunity Employer of Minorities/Women/Individuals with Disabilities/Protected Veterans.EEO is the Law link - English: http://webstorage.abbott.com/common/External/EEO_English.pdfEEO is the Law link - Espanol: http://webstorage.abbott.com/common/External/EEO_Spanish.pdf","description_format":"text","description_chars":9445,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Prescription Drugs","Information Security","Neurotech & Neuromodulation"],"lifecycle":[{"event":"open","at":"2026-08-20T00:00:00Z"},{"event":"close","at":"2026-08-20T22:12:22Z"},{"event":"reopen","at":"2026-08-30T00:00:30Z"},{"event":"close","at":"2026-09-02T21:46:52Z"},{"event":"reopen","at":"2026-09-09T16:11:41Z"},{"event":"close","at":"2026-09-16T22:16:06Z"},{"event":"reopen","at":"2026-09-29T11:44:14Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":0,"green_card_filings_12m":1,"median_offered_wage_usd":112500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.269,"p_room":0.28,"age_days":58,"expected_fill_days":15,"reasons":["conf:3","repost:3","velocity","ghost","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":198700,"is_top_pay":false},"html_url":"https://alion.io/job/abbott-staff-product-security-engineer","json_url":"https://alion.io/job/abbott-staff-product-security-engineer.json","meta":{"generated_at":"2026-10-17T16:43:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23024,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2710},"rest":"https://alion.io/mcp/rest/get_company?id=2710"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fabbott-staff-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fabbott-staff-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fabbott-staff-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/abbott-staff-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fabbott-staff-product-security-engineer"}]}