Essential Duties & Responsibilities 

Performs cybersecurity engineering functions within a scheduled timeframe and performance criteria  Identify areas to improve our product to better align with FDA cybersecurity guidance and standards such as NIST Risk Management Framework, UL 2900, AAMI TIR 57 and Joint Security Plan (JSP).  Review corporate cybersecurity guidelines and incorporate into process and development efforts for our group. Identify opportunities for modifications to the software applications to improve cybersecurity threat protection profile.  Assist with efforts to create SBOMs for several software components and establish ongoing surveillance techniques. Evaluate tools to assist with this effort.  Assist with efforts to establish penetration testing suites for continuous testing and monitoring of our product solution.  Assist with efforts to establish a software update process to test and deploy Windows OS security patches.  Provide SecureLink support in terms of customer requirements for connecting and addressing cybersecurity concerns.  Provide overall guidance and answer customer questions regarding cybersecurity concerns with the deployment of our product solution.  Support Remote Diagnostic efforts by defining cybersecurity mitigations for connecting remotely to customers using IoT agents and Azure infrastructure.  Engineering documentation: Responsible for engineering documentation of software specifications, designs, modifications and technical procedures  

 Qualifications 

Position is based in Marlborough, MA. In office work of 50% or greater is preferred.  Thorough familiarity with FDA Cybersecurity Guidelines and cybersecurity standards such as NIST Risk Management Framework, UL 2900, AAMI TIR 57 and Joint Security Plan (JSP).  Ability to evaluate and define cybersecurity solutions   Ability to communicate effectively & constructively  Ability to work independently on all tasks  Strong written communication skills  Strong interpersonal skills  Thorough familiarity with Windows operating system is required.  Software engineering skills are desired.  Knowledge of cloud-based software development and deployment is desired. 

 

Experience 

Minimum of 8 years professional experience in network/software/cybersecurity development.  Skilled in writing design documentation and operating procedures  Experience working in an FDA regulated environment is a plus 

 

Education 

BS/BA required in Computer Science, Computer Engineering, Electrical Engineering, or equivalent  MS a plus 

The annualized base salary range for this role is $127,300 to $194,100 and is bonus eligible. Final compensation packages will ultimately depend on factors including relevant experience, skillset, knowledge, geography, education, business needs and market demand.

Agency and Third Party Recruiter Notice:

Agencies that submit a resume to Hologic must have a current executed Hologic Agency Agreement executed by a member of the Human Resource Department. In addition Agencies may only submit candidates to positions for which they have been invited to do so by a Hologic Recruiter.  All resumes must be sent to the Hologic Recruiter under these terms or they will not be considered.

 

Must follow all applicable FDA regulations and ISO requirements.

Hologic is an equal opportunity employer inclusive of female, minority, disabled and veterans, (F/M/D/V)