{"id":2576809,"url":"https://alion.io/job/baxter-principal-engineer-cybersecurity","title":"Principal Engineer, Cybersecurity","company":{"id":5835,"name":"Baxter","domain":"baxter.com","url":"https://alion.io/company/baxter","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":27000,"max_usd":60000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Fortify","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"ISO 27001","optional":true},{"name":"NIST 800-53","optional":true}],"status":"live","first_seen_at":"2026-10-14T00:00:00Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T10:19:30Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"This is where your work makes a difference.\nAt Baxter, we believe every person-regardless of who they are or where they are from-deserves a chance to live a healthy life. It was our founding belief in 1931 and continues to be our guiding principle. We are redefining healthcare delivery to make a greater impact today, tomorrow, and beyond.\nOur Baxter colleagues are united by our Mission to Save and Sustain Lives. Together, our community is driven by a culture of courage, trust, and collaboration. Every individual is empowered to take ownership and make a meaningful impact. We strive for efficient and effective operations, and we hold each other accountable for delivering exceptional results.\nHere, you will find more than just a job-you will find purpose and pride.\nYour Role at Baxter\nAs a Principal Product Cybersecurity Engineer, you will own and direct the cybersecurity design, architecture, and analysis of medical devices, digital platforms, and connected healthcare solutions. You will serve as a cybersecurity subject matter expert, leading security initiatives from concept through deployment while providing technical leadership and mentorship across cross-functional teams. You will drive cybersecurity strategy, influence technical decision making, and ensure products are designed and maintained in alignment with industry’s best practices, regulatory expectations, and organizational objectives.\nYou will contribute to the organization's cybersecurity vision and strategic roadmap, utilizing deep knowledge of medical device security, connectivity, cloud technologies, software development, and risk management to deliver innovative and secure solutions.\nWhat you'll be doing\nLead the implementation of cybersecurity principles as part of the overall architecture for medical devices, connected systems, digital platforms, and hosted solutions.\nCreate, own, and maintain security-related documentation including:\nThreat Models and Interface Architecture\nSecurity Requirements and Architectures\nSecurity Risk Assessments and Security Risk Analyses\nData Protection Impact Assessments (DPIAs)\nProduct Security Whitepapers\nManufacturer Disclosure Statements for Medical Devices (MDS2)\nSoftware Bills of Materials (SBOMs)\nStatic Code Analysis Reports and Security Evidence Packages\nPartner with product development teams to establish and maintain cybersecurity requirements, plans, policies, and best practices throughout the product lifecycle.\nLead threat modeling activities and security architecture reviews for medical devices, software applications, cloud-hosted services, and interconnected systems.\nPerform and guide vulnerability assessments, penetration testing, fuzz testing, secure code analysis, and vulnerability scanning activities.\nEstablish governance processes around product vulnerability management and cybersecurity risk management.\nMonitor threat intelligence, analyze emerging threats, CWEs, CVEs, and zero-day vulnerabilities, and assess potential impacts on products and platforms.\nAssess third-party software, open-source components, and off-the-shelf technologies for secure use within Baxter products and solutions.\nDrive cybersecurity improvements across cross-functional teams including Engineering, Quality, Regulatory, Risk Management, Marketing, Clinical, Human Factors, Service, and Compliance.\nEnsure compliance with product development processes, quality systems, design controls, and applicable cybersecurity standards and regulations.\nSupport annual security audits and assessments, including SOC 2, HITRUST, and other cybersecurity compliance initiatives.\nParticipate in security incident investigations, response activities, and post-incident recovery efforts.\nInterface with regulatory agencies and external stakeholders as needed to represent cybersecurity aspects of Baxter products.\nContribute to external cybersecurity communications including security bulletins, whitepapers, FAQs, and customer-facing documentation.\nLead project planning, estimation, and execution of cybersecurity deliverables while mentoring and guiding junior engineers and technical teams.\nWhat you'll bring\nBachelor’s degree in computer science, Engineering, Information Security, Mathematics, Information Management, or a related technical discipline; advanced degree preferred.\n5+ years of experience in software development, cybersecurity engineering, product security, or secure software development lifecycle (SSDLC) activities.\nStrong understanding of application security and secure development practices throughout the software lifecycle.\nExperience addressing OWASP Top 10 vulnerabilities and implementing secure coding practices.\nExperience performing threat modeling, security risk assessments, secure design reviews, and vulnerability analysis.\nExperience with threat modeling methodologies such as STRIDE, DREAD, LINDDUN, PASTA, or similar frameworks.\nExperience with vulnerability scanning, penetration testing, fuzz testing, and secure code analysis tools.\nExperience with security and software analysis tools such as Coverity, Black Duck, Fortify, Nessus, or equivalent technologies.\nExperience analyzing threat intelligence, CVEs, and CWEs and translating findings into actionable product improvements.\nStrong technical writing and communication skills with the ability to communicate effectively to both technical and non-technical audiences.\nAbility to influence technical direction, lead cross-functional initiatives, and drive decisions aligned with business objectives.\nPreferred Qualifications\nExperience with cybersecurity requirements for medical devices, connected healthcare systems, cloud platforms, and hosted software applications.\nFamiliarity with security, privacy, and risk management frameworks including NIST 800-53, ISO 27001/27002, IEC TR 80001, UL 2900, FIPS 140, ICS-CERT guidance, and privacy-by-design principles.\nExpertise in designing secure networks, systems, cloud architectures, and application ecosystems.\nSecurity certifications such as CSSLP, CAP, CISSP, or equivalent.\nStrong analytical skills, attention to detail, and a demonstrated ability to solve complex cybersecurity challenges.\nEqual Employment Opportunity\nBaxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.\nReasonable Accommodations\nBaxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.\nRecruitment Fraud Notice\nBaxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.","description_format":"text","description_chars":7227,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Patient Monitoring","Hospital Equipment & Furniture"],"lifecycle":[{"event":"open","at":"2026-10-15T00:24:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":32,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/baxter-principal-engineer-cybersecurity","json_url":"https://alion.io/job/baxter-principal-engineer-cybersecurity.json","meta":{"generated_at":"2026-10-15T11:02:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16949,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5835},"rest":"https://alion.io/mcp/rest/get_company?id=5835"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbaxter-principal-engineer-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbaxter-principal-engineer-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbaxter-principal-engineer-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/baxter-principal-engineer-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbaxter-principal-engineer-cybersecurity"}]}