Embedded Security Architect

This is where you save and sustain lives

At Baxter, we are deeply connected by our mission. No matter your role at Baxter, your work makes a positive impact on people around the world. You'll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients.

Baxter's products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.

Together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work.

Join us at the intersection of saving and sustaining lives- where your purpose accelerates our mission.

Your role at Baxter

Nothing changes if nothing changes, which is why Baxter is transforming our global IT function-into one that will strengthen partnerships and enable smarter, more efficient and connected business processes. In the dynamic healthcare industry, we need to be ready to face new challenges and opportunities. As we learn, we must be agile and innovative to reveal new ways of working. Technology and our digital capability will help create a more efficient and innovative ecosystem to enable our employees, customers and products to drive better outcomes for patients worldwide.

We are at the critical intersection where robust IT infrastructure and networking support meets the physicians, nurses and care givers who save and sustain lives. Together, we can build upon Baxter's rich heritage to advance the next generation of transformative healthcare innovations. Together, we can change how IT meets healthcare. Together, we are Baxter.

This is where technology fuels purpose-driven work. Where your purpose accelerates our mission.

Are you a security focused mobile software architect who loves helping developers build secure software? Do you know how to ensure that information security application development standard methodologies are understood and implemented into an already established software development lifecycle? If so, this outstanding opportunity is for you!

Your team

As an Embedded Product Security Architect, you will ensure the security of our company's embedded products and systems. You will work closely with multi-functional teams to identify potential security risks and develop strategies to mitigate them. You will craft and implement security measures, monitor for vulnerabilities, and mentor to development teams to ensure security standard methodologies are being followed in the embedded environment. You will be driving adoption of the best secure practices for embedded devices including secure boot, secure storage, and latest secure enclave architecture.

What you'll be doing

• Collaborate with our development and scrum teams to strengthen existing software development lifecycle and standardize secure development process across the company
• Collaborate with multi-functional teams, including hardware design, firmware development, and compliance, to ensure that security requirements are incorporated into product design and development processes in the embedded environment.
• Perform security architecture design reviews of Baxter's embedded products and drive innovation and improvements
• Ensure all identified embedded application security vulnerabilities are prioritized and remediated appropriately
• Define security requirements for embedded product lines.
• Develop, review, and train security engineers on threat models and security risk assessments.
• Drive reference embedded security architecture for products and drive companywide adoption using Yocto Linux platform.
• Lead adoption of security features including secure boot, PKI, and hardware-based security.
• Guide product teams on analysis and resolution of SAST and DAST findings.

What you'll bring

• Bachelor's degree in Computer Science or a related field required
• Certification in security such as CSSLP or equivalent desired but not required
• 8+ years of secure software development lifecycle experience and security architecture
• Authority of securing embedded products
• Knowledgeable of application security throughout the software lifecycle.
• High level of experience of architecture for enabling secure boot, cryptographic algorithms, PKI, and secure communication protocols such as TLS and HTTPS
• Experience in addressing OWASP Top 10 vulnerabilities
• Experience developing secure coding practices with technologies such as C/C++, Python, and C#
• Knowledge of Security Integration into CI/CD and experience in driving CI/CD adaptation for Security controls
• Experience in FDA, Medical Device, or similar regulated environment desired

We understand compensation is an important factor as you consider the next step in your career. At Baxter, we are committed to equitable pay for all our employees, and we strive to be more transparent with our pay practices. To that end, this position has a base salary range of $112,000 to $216,000 plus an annual incentive bonus, and equity target (.The above range represents the expected base salary range for this position. The actual salary may vary based upon several factors including, but not limited to, relevant skills/experience, time in the role, business line, and geographic/office location.

#LI-VF

The successful candidate for this job may be required to verify that he or she has been vaccinated against COVID-19, subject to reasonable accommodations for individuals with medical conditions or religious beliefs that prevent vaccination, and in accordance with applicable law.

Equal Employment Opportunity

Baxter is an equal opportunity employer. Baxter evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.

EEO is the Law

EEO is the law - Poster Supplement

Pay Transparency Policy

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.