A

Abbott

Makes heart devices, glucose sensors and lab tests

Software Cybersecurity Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeSan Diego, CA, USA$100k - $200k

About the Job

Requirements

  • An associate's degree and 7 years of relevant experience are required.
  • A minimum of 5 years of experience in cybersecurity, product security, IT security, or related work is preferred; 7 or more years is preferred, with a strong preference for product security involving consumer-facing applications and services and hands-on engineering.
  • Hands-on experience conducting web, mobile, and cloud infrastructure security testing using DAST, SAST, software composition analysis, SBOM generation tools, and network- and agent-based vulnerability scanning tools is preferred.
  • Relevant certifications, held or in progress, such as CISSP, CISA, CISM, CCSP, or CEH (or equivalent) are preferred.
  • Prior product-development cybersecurity experience and familiarity with diagnostic equipment, medical devices, or closely related products are preferred.
  • Advanced experience using AI in everyday work, including AI skills and automations, AI agents, and MCP servers, and the ability to build and modify agents supporting cybersecurity deliverables is preferred.
  • Familiarity with emerging AI tools and copilots, with judgment to use them securely and in accordance with policy, is preferred.
  • Understanding of ISO 27001 and NIST cybersecurity frameworks, and experience with audit and certification processes, is preferred.
  • The candidate should be able to work independently on complex tasks amid changing priorities and apply analytical and critical-thinking skills and sound judgment.
  • Strong documentation, oral, and written communication skills are needed to interact with management and staff and communicate business risk related to cybersecurity.
  • The candidate should communicate effectively within cross-functional groups and perform peer reviews of work products and documents.

Responsibilities

  • Design, implement, and validate cybersecurity controls for cloud-based applications, software products, and connected medical devices; identify and assess security risks, vulnerabilities, and emerging threats; and drive remediation strategies to maintain security and regulatory compliance.
  • Independently lead complex cybersecurity initiatives, deliver release-ready security artifacts, conduct technical security reviews with engineering teams, and translate vulnerability findings into actionable business-focused risk insights for technical and leadership stakeholders.
  • Use automation and AI-enabled tools to improve security assessment, risk analysis, and compliance outcomes, and advance the team's use of AI and agentic automation to improve cybersecurity deliverables.
  • Work with corporate and external penetration-testing teams to identify vulnerabilities and determine mitigations and resolutions.
  • Identify and assess vulnerabilities in systems and applications using manual and automated testing to find and exploit code flaws, misconfigurations, and insecure software.
  • Monitor current security threats and vulnerabilities, maintain cybersecurity knowledge, and recommend remediation for identified vulnerabilities.
  • Develop product software release artifacts, including software bills of materials, vulnerability remediation evidence, threat models, and release security documentation; lead technical reviews with development teams on vulnerabilities, security controls, remediation progress, and residual risk.
  • Design systematic remediation strategies and preventive controls to reduce recurring vulnerabilities, including secure coding practices, dependency management, and configuration hardening across products and supporting applications.
  • Occasionally participate in client kickoff and discovery sessions with senior leaders or stakeholders to answer prospect and client questions.
  • Provide information security expertise, help incorporate control measures into new and existing medical-device projects, and assist with risk assessments of existing and new cloud systems and medical devices.
  • Design and develop security strategies for cloud-based applications, including hardening, incident response, penetration testing, and disaster recovery.
  • Perform procedures necessary to protect information-system assets from intentional or inadvertent access or destruction.
  • Apply knowledge of user authentication, certificate management, digital signatures, and cloud security architecture.
  • Support the development, implementation, and effectiveness of the Quality Management System in accordance with ISO, FDA, and other regulatory agency requirements.
  • Use programming languages including Python, JavaScript, and React.
  • Use AI-assisted development tools such as GitHub Copilot and other large-language-model-based code assistants to write, review, and secure code.
  • Apply web application security knowledge, including web application scanners and manual testing techniques.
  • Use AI-powered cybersecurity tools for threat detection, vulnerability triage, and log analysis, validating their results for accuracy and safety.
  • Apply AI to cybersecurity deliverables, including vulnerability triage and deduplication, software bill of materials and CVE analysis, drafting security documentation and remediation evidence, and summarizing findings into risk insights.
  • Maintain working familiarity with current and emerging AI tools and copilots and evaluate them for safe, policy-compliant use in security workflows.
  • Build, configure, and modify agentic AI applications, including AI agents, skills and automations, and MCP servers, to automate scan-result analysis, evidence collection, dashboarding, and remediation tracking with guardrails, human review, and data-handling controls.
  • Promote responsible and secure AI use, including awareness of risks such as prompt injection, data leakage, and model or supply-chain risk in Abbott products and internal security tooling.

About the Company

Abbott

Makes heart devices, glucose sensors and lab tests

Abbott makes medical devices, diagnostic tests, nutrition products and branded generic drugs for hospitals, laboratories, pharmacies and patients. Its best-known product is the FreeStyle Libre, a coin-sized sensor worn on the upper arm that tracks blood sugar around the clock without routine finger pricks. Its other lines run from heart valves, pacemakers and brain stimulators to lab analyzers, rapid tests and mail-in colon cancer screening kits, and Abbott earns money by selling these products to health systems, labs, retailers and consumers. The company was founded in 1888 by Chicago physician Wallace Abbott and is based in Abbott Park, Illinois.

Company size
10,001+
Company stage
IPO
Headquarters
Abbott Park, IL
Founded
1888

Recently Posted Jobs

Explore more opportunities at Abbott

See more jobs