Senior Principal Product Security Engineer

This is where
your work makes a difference.

At Baxter, we believe every person—regardless of who they are or where they are from—deserves a chance to live a healthy life. It was our founding belief in 1931 and continues to be our guiding principle. We are redefining healthcare delivery to make a greater impact today, tomorrow, and beyond.

Our Baxter colleagues are united by our Mission to Save and Sustain Lives. Together, our community is driven by a culture of courage, trust, and collaboration. Every individual is empowered to take ownership and make a meaningful impact. We strive for efficient and effective operations, and we hold each other accountable for delivering exceptional results.

Here, you will find more than just a job—you will find purpose and pride.

Your Role at Baxter

Secure technology that saves lives.

In support of our mission to save and sustain lives
, we take product security seriously. We’re seeking a Sr Principal Cybersecurity Engineer to strengthen the cybersecurity of our diagnostic cardiology products and help shape the future of connected, life‑critical medical technology.

In this role, you’ll lead by example—driving secure design, influencing architecture, and mentoring engineers across teams. You’ll work closely with product development to proactively identify risks, respond to emerging threats, and embed security into every stage of the software lifecycle. We offer a culture of trust, flexibility, and growth
, where you manage your time and shape your career path.

What you'll be doing

• Define and document the security architecture and cybersecurity posture of life‑critical medical products
• Lead threat modeling, interface analysis, and secure design reviews across product lines
• Author product security whitepapers
  , technical documentation, and regulatory‑facing materials
• Develop Manufacturer Disclosure Statements for Medical Devices (MDS²) and related artifacts
• Produce and interpret static code analysis and vulnerability assessment reports
• Partner with development teams on security requirements and policies
• Establish and drive governance around vulnerability management
  , from discovery through remediation
• Support incident response, investigation, and recovery efforts in collaboration with cross‑functional teams
• Use industry‑leading tools (e.g.,
  Tenable Nessus, Fortify, Coverity
  ) to identify, analyze, and mitigate risks
• Monitor and assess zero‑day threats and emerging vulnerabilities
• Participate in security planning, project scoping, and delivery of security initiatives
• Evaluate third‑party and off‑the‑shelf components to ensure secure use

What you'll bring

• Bachelor’s degree in Computer Science or a related technical field
• 8+ years of experience working within a secure software development life cycle (SSDLC)
• Strong understanding of application security across the full software life cycle
• Hands‑on experience developing, reviewing, or enforcing secure coding practices
• Familiarity with handling PHI and PII in regulated environments
• Experience with threat modeling methodologies such as STRIDE, DREAD, LINDDUN, or PASTA
• Proven ability to perform security risk assessments and clearly communicate risk and business impact
• Experience analyzing, documenting, and remediating software and system vulnerabilities
• Familiarity with industry standards and guidance including IEC TR 80001, NIST 800‑53, ISO/IEC 27001 & 27002 (preferred)
• Expertise in designing secure networks, systems, and application architectures

We understand compensation is an important factor as you consider the next step in your career. At Baxter, we are committed to equitable pay for all employees, and we strive to be more transparent with our pay practices. The estimated base salary for this position is $128,000 to $176,000 annually. The estimated range is meant to reflect an anticipated salary range for the position.

We may pay more or less than of the anticipated range based upon market data and other factors, all of which are subject to change. Individual pay is based on location, skills and expertise, experience, and other relevant factors. This position may also be eligible for discretionary bonuses. For questions about this, our pay…