Haemonetics
Principal Product Cybersecurity Engineer (Boston Hybrid - 3 days on site)
Boston, MA, US · Principal
Sponsorship not specified$53k-$800kDetected 30 days ago
AWSTerraformCI/CDDevOpsCybersecurityDetection EngineeringIncident ResponseSupply ChainFDA RegulatoryMedical DevicesLeadershipCISSPCompTIA
About the role
- If you are seeking a career that is challenging and rewarding, a work environment that is diverse and dynamic, look no further - Haemonetics is your employer of choice.
- EEO Policy Statement Pay Transparency: The base pay actually offered to the successful candidate will take into account, without limitation, the candidate's location, education, job-knowledge, skills, and experience in prior relevant roles.
- For sales roles, employees will be eligible for sales incentive (i.e., commission) under the applicable plan terms.
Responsibilities
- Perform threat modeling and architecture reviews for:
- Define and validate security controls for authentication, authorization, encryption, and data protection in patient-impacting systems.
- Partner with Quality and Regulatory teams to ensure cybersecurity requirements are documented, traceable, and auditable.
- Design and review security architectures using AWS services
- Implement product-focused logging, monitoring, and threat detection
- Support secure build, artifact signing, and release integrity controls.
- Support product vulnerability intake, triage, and remediation across device software and cloud services.
- Collaborate with incident response teams to investigate and contain product-related security events.
- Mentor engineers and influence secure design decisions through practical guidance and standards.
- Drive continuous improvement in product security maturity and resilience.
Requirements
- 10+ years of experience in cybersecurity engineering with a strong focus on product and application security
- Strong understanding of:
- Hands-on experience with AWS cloud security in support of products and services.
- Ability to work effectively across Engineering, Quality, Regulatory, and Product teams.
Nice to have
- IEC 62304, ISO 14971, ISO 13485
- FDA cybersecurity expectations, UL 2900, AAMI TIR57/TIR97
- EU MDR and IEC 81001‑5‑1
- Exposure to CSPM, CIEM, or cloud workload protection platforms.
- Certifications (One or More Required)
- CISSP (ISC²) or CISM (ISACA)
- CompTIA Security+ or CySA+
- GIAC certifications (e.g., GSEC, GWAPT, GPEN)
Skills
- AWS (IAM, VPC, ECS, Lambda, S3, RDS, KMS, CloudTrail, GuardDuty)
- AWS CI/CD pipelines, Infrastructure as Code (Terraform)
- EEO Policy Statement
Compensation
- $103,600.00-$176,400.00/Annual
- The base pay actually offered to the successful candidate will take into account, without limitation, the candidate's location, education, job-knowledge, skills, and experience in prior relevant roles.
- Incentives may also be provided as part of Haemonetics' employee compensation.
- For sales roles, employees will be eligible for sales incentive (i.e., commission) under the applicable plan terms.
- For non-sales roles, employees will be eligible for a discretionary annual bonus, the target amount of which varies based on the applicable role, to be governed by the applicable plan terms.
- Employees may also be eligible to participate in the Company's long-term incentive plan, with eligibility and target amount dependent on the role.
Benefits
- For non-sales roles, employees will be eligible for a discretionary annual bonus, the target amount of which varies based on the applicable role, to be governed by the applicable plan terms.
- Embed security into the medical device and SaMD SDLC, including secure design reviews, threat modeling, and security requirements definition.
- Mobile and web applications supporting medical devices
- Secure AWS-hosted product backends supporting medical devices and SaMD.
- Establish and maintain SBOM practices and third-party component governance for medical device software.
- The base pay actually offered to the successful candidate will take into account, without limitation, the candidate's location, education, job-knowledge, skills, and experience in prior relevant roles.
- Depending on your location, you may be eligible for more detailed information related to the compensation and benefits related to this job posting.
Company info
- Employees may also be eligible to participate in the Company's long-term incentive plan, with eligibility and target amount dependent on the role.
- Incentives may also be provided as part of Haemonetics' employee compensation.
Apply directly at Haemonetics →Create a free account for alerts like thisView Haemonetics immigration profile
This listing is sourced directly from Haemonetics's careers page and normalized into a canonical job model.