Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

This Senior Cybersecurity Engineer position can work out remotely within the U.S.

The Senior Cybersecurity Analyst is responsible for identifying potential security risks, vulnerabilities, and threats to execute mitigation and remediation strategies/processes that ensure Abbott builds safe and secure products that are compliant with industry cybersecurity regulation and meet customer and patient security expectations.

What You'll Work On

• Develop and deliver cybersecurity artifacts for product software releases, including SBOMs, vulnerability remediation evidence, and release security documentation. Lead technical reviews with development teams to discuss vulnerabilities, security controls, remediation progress, and residual risk.
• Prioritize vulnerability remediation and patching efforts based on business impact, proof of exploit, and policy requirements, partnering with engineering, PMs, and product owners to drive timely risk reduction.
• Design and recommend systematic remediation strategies and preventive controls to reduce recurring vulnerabilities, including secure coding practices, dependency management, and configuration hardening across product and supporting applications.
• Validate security fixes through hands-on testing. Specialty in one domain of product security such as web application testing using tools such as Burp Suite and Postman, hardware testing, or verification/testing of remediation for iOS and Android mobile application vulnerabilities.
• Clearly communicate complex technical security concepts to executive leadership and cross-functional stakeholders, translating vulnerability findings, security controls, and security metrics into business-relevant risk insights and decision support.
• Lead remediation efforts after security assessment findings outline weaknesses requiring attention. Support the advancement of cyber threat and vulnerability management program to ensure consistent identification, analysis, response, and monitoring of cyber security threats, events, and vulnerabilities.
• Leverage JIRA for security project and vulnerability management, building dashboards, reports, and automation workflows to track remediation progress, improve visibility of security metrics, and streamline coordination across cross-functional teams.
• Triage findings from application, network-based, and agent-based security scanning tools (SAST, DAST, SCA, infrastructure scanners) to determine true security impact, validate exploitability, and distinguish false positives. Communicate residual risk and remediation activities to technical and non-technical audiences.
• Participate in cross-functional team coordination to achieve defined security goals as well as meet technical requirements in support of detailed implementation plans for security projects. Provide technical advice and training about potential security risks and prevention strategies.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field
• Minimum 5 years of relevant professional experience, including at least 2 years of experience in cybersecurity, information security, software security, IT, engineering, or a related discipline
• Self-starter who can Identify and implement end to end AI workflows through custom models, skills, and agentic development to reduce vulnerability risk and mature processes.
• Demonstrated hands on experience conducting web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, SBOM generation tooling, and network and agent-based vulnerability scanning tools.
• Ability to prioritize multiple projects with strong organization skills. Demonstrated critical thinking, analytical skills, judgment, and logic for problem-solving and decision-making in an environment with changing priorities.
• Ability to work effectively in a team environment, adapting to rapidly changing business and technological needs.
• Excellent documentation, communication and interpersonal skills.

Preferred

• Holds or is actively pursuing one or more industry-recognized cybersecurity certifications, such as CISSP, CISM, CEH, or equivalent.
• Prior experience in a cybersecurity role supporting product development, secure product design, or product security engineering.
• Familiarity with the design, development, and cybersecurity requirements of diagnostic equipment, medical devices, or other regulated technology products.

The base pay for this position is $86,700.00 – $173,300.00. In specific locations, the pay range may vary from the range posted.