Cyber security

We are hiring for our client Baxter.

Bengaluru

1st round virtual + 2nd  round f2f

Skills: Cyber security, Application Security, Product Security, Threat Modeling, Embedded Security, IoT Security, Cloud Security, Medical Device Security (if available)

Job Description

Job Description

We are seeking a Senior Software Engineer(Cybersecurity) with strong expertise in Application Security and exposure to AIassisted tools and techniques to design, secure, and enhance innovative healthcare technology solutions within our Front Line Care product portfolio. This role focuses on embedding security into scalable, highquality software and device solutions that directly impact patient care and clinical outcomes. The ideal candidate is technically strong, passionate about secure product development, and motivated by contributing to lifesaving healthcare technologies.

Key Responsibilities

• Partner closely with software development teams to promote a securitybydesign mindset by defining secure implementations and coding practices aligned with the Application Security Program.
• Design and implement secure coding solutions, patterns, and guidelines for embedded and cloud environments, ensuring compliance with security and privacy requirements defined in security plans, risk assessments, policies, and procedures.
• Support security project governance activities, including planning, scheduling, prioritization, and tracking of security initiatives.
• Proactively drive security solution implementations in collaboration with development leads, security architects, and product owners.
• Lead feature implementations aligned with system architecture through design, coding, reviews, and testing; perform Proof of Concept (POC) activities as needed.
• Review, analyze, and mitigate findings from SAST, DAST, SCA, and penetration testing in collaboration with development teams across electromechanical medical device product lifecycles.
• Assess existing software security controls and implement security enhancements across multiple medical devices and platforms.
• Participate in postmarket product analysis to support vulnerability investigations and contribute to continuous security monitoring efforts.
• Leverage AIassisted techniques to secure the system.

Required Qualifications & Experience

• Bachelor’s degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.
• Minimum of 6+ years of experience in cybersecurity design and development; experience with embedded systems is preferred.
• Handson experience with Java, C++, C#, Linux, and secure software design within complex systems.
• Proven experience analyzing, interpreting, and remediating security findings from SAST, DAST, SCA, and penetration testing tools.
• Experience with embedded dataatrest security implementations, including Code Signing, Secure Boot, and flash encryption.
• Experience in designing and implementing secure wired and wireless networking solutions for embedded/IoT systems across multiple OSI layers.
• Handson experience with IoT and embedded PKI solutions and implementations.
• Demonstrated experience in cybersecurity development for embedded and digital products.
• Strong ability to guide software development teams on secure coding practices and the interpretation of application security testing reports across multiple programming languages and operating environments.
• Solid understanding of secure software development lifecycle (SSDLC) practices, including SAFe and Agile methodologies.
• Strong knowledge of securitybydesign principles and architecturelevel security concepts.
• Proficient understanding and practical application of security technologies such as cryptographic algorithms and cipher suites, PKI, hardware/embedded authentication protocols, Secure Boot mechanisms, and dataatrest encryption.
• Experience implementing and enforcing OWASP Top 10 application security guidelines.
• Knowledge of embedded system architecture and security controls, including firewall configurations, border routers, wireless communication architectures, and messaging authentication protocols.
• Experience generating, reviewing, and validating penetration test results using standard methodologies and tools, including threat modeling, security analysis, and system security audits.
• Uptodate knowledge of current and emerging security threats, attack techniques, and vulnerability exploitation methods.
• Exposure to international privacy regulations and crossindustry security trends.
• Exposure to AIassisted tools and techniques.