United States onlyJOB DESCRIPTION:
We’re focused on helping people with diabetes manage their health with life-changing products that provide accurate data to drive better-informed decisions. We’re revolutionizing the way people monitor their glucose levels with our new sensing technology.
Working at Abbott
At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You’ll also have access to:
Career development with an international company where you can grow the career you dream of.
Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year
An excellent retirement savings plan with high employer contribution
Tuition reimbursement, the Freedom 2 Save student debt program and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.
A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune.
A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists.
THE OPPORTUNITY
This Senior Cybersecurity Engineer position can work out remotely within the U.S.
The Senior Cybersecurity Engineer is responsible for identifying potential security risks, vulnerabilities, and threats to execute mitigation and remediation strategies/processes that ensure Abbott builds safe and secure products that are compliant with industry cybersecurity regulation and meet customer and patient security expectations.
What You’ll Work On
Develop and deliver cybersecurity artifacts for product software releases, including SBOMs, vulnerability remediation evidence, and release security documentation. Lead technical reviews with development teams to discuss vulnerabilities, security controls, remediation progress, and residual risk.
Prioritize vulnerability remediation and patching efforts based on business impact, proof of exploit, and policy requirements, partnering with engineering, PMs, and product owners to drive timely risk reduction.
Design and recommend systematic remediation strategies and preventive controls to reduce recurring vulnerabilities, including secure coding practices, dependency management, and configuration hardening across product and supporting applications.
Triage and analyze findings from application, network‑based, and agent‑based security scanning tools (SAST, DAST, SCA, infrastructure scanners) to determine true security impact, validate exploitability, and distinguish false positives.
Validate security fixes through hands‑on testing, including web application testing using tools such as Burp Suite and Postman, and verification of remediation for iOS and Android mobile application vulnerabilities.
Clearly communicate complex technical security concepts to executive leadership and cross‑functional stakeholders, translating vulnerability findings, security controls, and security metrics into business‑relevant risk insights and decision support.
Lead remediation efforts after security assessment findings outline weaknesses requiring attention. Support the advancement of cyber threat and vulnerability management program to ensure consistent identification, analysis, response, and monitoring of cyber security threats, events, and vulnerabilities.
Leverage JIRA for security project and vulnerability management, building dashboards, reports, and automation workflows to track remediation progress, improve visibility of security metrics, and streamline coordination across cross‑functional teams.
Participate in cross-functional team coordination to achieve defined security goals as well as meet technical requirements in support of detailed implementation plans for security projects. Provide technical advice and training about potential security risks and prevention strategies.
Qualifications:
Bachelor's degree in computer and information sciences or engineering, Security Systems, or related fields.
Minimum 3 years ofIT management system, cybersecurity, or other relevant experience with a strong preference for product security(i.e. – consumer facing applications and services).
Minimum 5 years of Business experience.
Demonstrated hands‑on experience conducting web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, SBOM generation tooling, and network‑ and agent‑based vulnerability scanning tools.
Ability to prioritize multiple projects with strong organization skills. Demonstrated critical thinking, analytical skills, judgment, and logic for problem-solving and decision-making in an environment with changing priorities.
Ability to work effectively in a team environment, adapting to rapidly changing business and technological needs.
Excellent documentation, communication and interpersonal skills.
Preferred:
Holds or working toward one or more relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), or equivalent.
Previous work experience in a product development cybersecurity role - Familiarity with design of diagnostic equipment, medical devices, or other closely related products.
#software
Learn more about our health and wellness benefits, which provide the security to help you and your family live full lives: www.abbottbenefits.com
Follow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity.
Connect with us at www.abbott.com, on Facebook at www.facebook.com/Abbott and on Twitter @AbbottNews and @AbbottGlobal
The base pay for this position is
$86,700.00 – $173,300.00In specific locations, the pay range may vary from the range posted.
India only