Haemonetics

Haemonetics

Principal Product Cybersecurity Engineer (Boston Hybrid - 3 days on site)

Boston, MA, US · Principal

Sponsorship not specified$53k-$800kDetected 30 days ago
AWSTerraformCI/CDDevOpsCybersecurityDetection EngineeringIncident ResponseSupply ChainFDA RegulatoryMedical DevicesLeadershipCISSPCompTIA

About the role

  • If you are seeking a career that is challenging and rewarding, a work environment that is diverse and dynamic, look no further - Haemonetics is your employer of choice.
  • EEO Policy Statement Pay Transparency: The base pay actually offered to the successful candidate will take into account, without limitation, the candidate's location, education, job-knowledge, skills, and experience in prior relevant roles.
  • For sales roles, employees will be eligible for sales incentive (i.e., commission) under the applicable plan terms.

Responsibilities

  • Perform threat modeling and architecture reviews for:
  • Define and validate security controls for authentication, authorization, encryption, and data protection in patient-impacting systems.
  • Partner with Quality and Regulatory teams to ensure cybersecurity requirements are documented, traceable, and auditable.
  • Design and review security architectures using AWS services
  • Implement product-focused logging, monitoring, and threat detection
  • Support secure build, artifact signing, and release integrity controls.
  • Support product vulnerability intake, triage, and remediation across device software and cloud services.
  • Collaborate with incident response teams to investigate and contain product-related security events.
  • Mentor engineers and influence secure design decisions through practical guidance and standards.
  • Drive continuous improvement in product security maturity and resilience.

Requirements

  • 10+ years of experience in cybersecurity engineering with a strong focus on product and application security
  • Strong understanding of:
  • Hands-on experience with AWS cloud security in support of products and services.
  • Ability to work effectively across Engineering, Quality, Regulatory, and Product teams.

Nice to have

  • IEC 62304, ISO 14971, ISO 13485
  • FDA cybersecurity expectations, UL 2900, AAMI TIR57/TIR97
  • EU MDR and IEC 81001‑5‑1
  • Exposure to CSPM, CIEM, or cloud workload protection platforms.
  • Certifications (One or More Required)
  • CISSP (ISC²) or CISM (ISACA)
  • CompTIA Security+ or CySA+
  • GIAC certifications (e.g., GSEC, GWAPT, GPEN)

Skills

  • AWS (IAM, VPC, ECS, Lambda, S3, RDS, KMS, CloudTrail, GuardDuty)
  • AWS CI/CD pipelines, Infrastructure as Code (Terraform)
  • EEO Policy Statement

Compensation

  • $103,600.00-$176,400.00/Annual
  • The base pay actually offered to the successful candidate will take into account, without limitation, the candidate's location, education, job-knowledge, skills, and experience in prior relevant roles.
  • Incentives may also be provided as part of Haemonetics' employee compensation.
  • For sales roles, employees will be eligible for sales incentive (i.e., commission) under the applicable plan terms.
  • For non-sales roles, employees will be eligible for a discretionary annual bonus, the target amount of which varies based on the applicable role, to be governed by the applicable plan terms.
  • Employees may also be eligible to participate in the Company's long-term incentive plan, with eligibility and target amount dependent on the role.

Benefits

  • For non-sales roles, employees will be eligible for a discretionary annual bonus, the target amount of which varies based on the applicable role, to be governed by the applicable plan terms.
  • Embed security into the medical device and SaMD SDLC, including secure design reviews, threat modeling, and security requirements definition.
  • Mobile and web applications supporting medical devices
  • Secure AWS-hosted product backends supporting medical devices and SaMD.
  • Establish and maintain SBOM practices and third-party component governance for medical device software.
  • The base pay actually offered to the successful candidate will take into account, without limitation, the candidate's location, education, job-knowledge, skills, and experience in prior relevant roles.
  • Depending on your location, you may be eligible for more detailed information related to the compensation and benefits related to this job posting.

Company info

  • Employees may also be eligible to participate in the Company's long-term incentive plan, with eligibility and target amount dependent on the role.
  • Incentives may also be provided as part of Haemonetics' employee compensation.

This listing is sourced directly from Haemonetics's careers page and normalized into a canonical job model.