
Senior Principal Product Security Engineer
Baxter International Inc.
full-time
Posted on:
Location Type: Office
Location: Skaneateles • Illinois • New York • United States
Visit company websiteExplore more
Salary
💰 $128,000 - $176,000 per year
Job Level
Tech Stack
About the role
- Secure technology that saves lives
- Define and document the security architecture and cybersecurity posture of life‑critical medical products
- Lead threat modeling, interface analysis, and secure design reviews across product lines
- Author product security whitepapers, technical documentation, and regulatory‑facing materials
- Develop Manufacturer Disclosure Statements for Medical Devices (MDS²) and related artifacts
- Produce and interpret static code analysis and vulnerability assessment reports
- Partner with development teams on security requirements and policies
- Establish and drive governance around vulnerability management, from discovery through remediation
- Support incident response, investigation, and recovery efforts in collaboration with cross‑functional teams
- Use industry‑leading tools (e.g., Tenable Nessus, Fortify, Coverity) to identify, analyze, and mitigate risks
- Monitor and assess zero‑day threats and emerging vulnerabilities
- Participate in security planning, project scoping, and delivery of security initiatives
- Evaluate third‑party and off‑the‑shelf components to ensure secure use
Requirements
- Bachelor’s degree in Computer Science or a related technical field
- 8+ years of experience working within a secure software development life cycle (SSDLC)
- Strong understanding of application security across the full software life cycle
- Hands‑on experience developing, reviewing, or enforcing secure coding practices
- Familiarity with handling PHI and PII in regulated environments
- Experience with threat modeling methodologies such as STRIDE, DREAD, LINDDUN, or PASTA
- Proven ability to perform security risk assessments and clearly communicate risk and business impact
- Experience analyzing, documenting, and remediating software and system vulnerabilities
- Familiarity with industry standards and guidance including IEC TR 80001, NIST 800‑53, ISO/IEC 27001 & 27002 (preferred)
- Expertise in designing secure networks, systems, and application architectures
Benefits
- Medical and dental coverage that start on day one
- Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
- Employee Stock Purchase Plan (ESPP)
- 401(k) Retirement Savings Plan (RSP), with options for employee contributions and company matching
- Flexible Spending Accounts
- Educational assistance programs
- Paid holidays
- Paid time off ranging from 20 to 35 days based on length of service
- Family and medical leaves of absence
- Paid parental leave
- Commuting benefits
- Employee Discount Program
- Employee Assistance Program (EAP)
- Childcare benefits
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
secure software development life cycle (SSDLC)application securitysecure coding practicesthreat modelingsecurity risk assessmentsstatic code analysisvulnerability assessmentdesigning secure networkssystem vulnerabilitiesapplication architectures
Soft Skills
leadershipcommunicationcollaborationdocumentationgovernanceincident responseproject scopingrisk communicationanalytical thinkingproblem-solving
Certifications
Bachelor’s degree in Computer ScienceIEC TR 80001NIST 800-53ISO/IEC 27001ISO/IEC 27002