Baxter - Made in Italy · 2 months ago
Principal Product Security Engineer
Baxter is a healthcare company committed to redefining healthcare delivery to make a greater impact. The Principal Product Security Engineer will lead efforts in product security, collaborating with development teams to establish security requirements and manage vulnerabilities, while also creating essential documentation and participating in audits.
Consumer GoodsFurnitureManufacturingRetail
Responsibilities
Create technical documentation around the security of a product including:
Threat modeling and interface architecture
Data Protection Impact Assessment
Product Security whitepapers
Manufacturer Disclosure Statement for Medical Devices
Software Bill of Materials
Static code analysis reports
Work collaboratively with the product development teams to establish information security requirements, plans, and policies
Establish governance around vulnerability management in products
Assist in responses to and recovery from a security breach in conjunction with other team members and business units
Use tools (Tenable Nessus, Fortify, Coverity, etc.) to scan for and test possible product vulnerabilities
Stay ahead of and advise about industry zero day discoveries and react to assess products
Work collaboratively with product teams on annual SOC2 and HiTrust audits for products
Investigate security breaches
Participate in project planning and scoping of security related deliverables and activities
Assess 3rd party and off the shelf components for secure use
Qualification
Required
Bachelor's degree in Computer Science or a related field desired
5+ years of secure software development life-cycle experience
Solid understanding of application security throughout the software life-cycle
Experience in addressing OWASP Top 10 vulnerabilities
Experience developing or analyzing secure coding practices with technologies such as ASP.Net (C#), SQL Server, HTML, C++
Strong technical writing skills
Familiarity with the privacy by design framework
Experience with Threat modeling methodologies like STRIDE, DREAD, LINDDUN, or PASTA
Experience performing security risk assessments and the ability to communicate impact of risk
Experience analyzing and documenting possible vulnerabilities found during development
Familiarity with industry standards and guidance such as IEC TR 80001, NIST 800-53, ISO IEC 27001 & 27002, etc
Expertise in designing secure networks, systems, and application architectures
Keen attention to detail, critical thinking and analytical abilities
Proven interpersonal and communication (verbal, written, presentation) skills
Preferred
Certification in security such as CAP, CSSLP, or equivalent desired but not required
Benefits
Medical and dental coverage that start on day one
Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
Employee Stock Purchase Plan (ESPP), with the ability to purchase company stock at a discount
401(k) Retirement Savings Plan (RSP), with options for employee contributions and company matching
Flexible Spending Accounts
Educational assistance programs
Paid holidays
Paid time off ranging from 20 to 35 days based on length of service
Family and medical leaves of absence
Paid parental leave
Commuting benefits
Employee Discount Program
Employee Assistance Program (EAP)
Childcare benefits
Company
Baxter - Made in Italy
Baxter is an Italian company founded in 1990 in that cultural and territorial melting pot where the high-end furniture production experience of Brianza meets the knowledge of design capital Milan, hub of Italian creativity.
Funding
Current Stage
Growth StageRecent News
HospitalManagement.net
2026-01-11
2026-01-09
Company data provided by crunchbase