Clinical Engineering Cyber Specialist

Position Title: Clinical Engineering Cyber Specialist (Confidential Client)

Location: Far Rockaway, NY | On-site

Employment Type: Permanent

Compensation

• Salary: Salary range up to $95K. Compensation is fair and equitable, partially determined by a candidate's education level or years of relevant experience. Salary offers are based on a candidate's specific criteria, like experience, skills, education, and training.

Benefits

Comprehensive benefits package that may include medical, dental, vision care and wellness programs; 401(k) plan with matching contributions; paid time off and company holidays; career growth opportunities and tuition reimbursement. More extensive information is provided to new employees upon hire.

Company Overview (Confidential)

Our Client delivers a healthcare technology management (HTM) and clinical engineering program, including medical device cybersecurity, for a hospital in Far Rockaway, NY.

Position Summary

Leading and supporting the implementation of medical device cybersecurity strategies! Our Client is seeking a Clinical Engineering Cyber Specialist to oversee and execute critical technical components of their healthcare cybersecurity program for a hospital in Far Rockaway, NY. This role leads the implementation of cybersecurity controls, performs risk assessments, and collaborates closely with hospital IT and InfoSec teams to ensure the security and availability of medical devices. The ideal candidate will bring strong technical leadership, a proactive approach to threat mitigation, and a deep understanding of healthcare regulatory requirements.

Leads the technical activities associated with the delivery of a medical device cybersecurity program, such as collection of cybersecurity data elements in the asset inventory, implementation of cybersecurity controls, and execution of critical cybersecurity fixes. Leads the technical analysis of emerging cybersecurity threats to determine impact to any devices in the asset inventory. Advises on technical elements of cybersecurity strategy, including recommendations for improvement. Supports the collection of metrics and key performance indicators for leadership review.

Primary Functions

• Lead the collection of critical cybersecurity data elements (CDEs) and manufacturer documentation in CMMS and conduct risk assessments based on those findings.


• Oversee configuration of medical devices to align with cybersecurity standards and manufacturer guidelines.


• Manage planned and unplanned vulnerability remediation efforts, including response to zero-day threats and coordination with device manufacturers.


• Investigate cybersecurity alerts on medical devices, analyze high-risk vulnerabilities, and develop response recommendations.


• Track and report on vulnerability remediation activities while identifying opportunities to improve cybersecurity practices across HTM and IT.


• Support HTM cybersecurity education, coach BMETs on best practices, and represent the company in industry cybersecurity forums.


• Technical Support (80%): Leads the collection of Critical Data Elements (CDEs) in CMMS; leads collection of manufacturer documentation and cybersecurity recommendations; leads risk assessment of assets based on collected CDEs and documentation; oversees out of the box configuration of medical devices to expected standards; leads the planned vulnerability remediation, such as planned patching or upgrades; leads the unplanned vulnerability remediation, such as response to zero-day threats; leads the coordination of cybersecurity activities with device manufacturers as needed; leads the testing and validation of network segmentation rules in coordination with hospital IT; supports a range of IT projects that have implications for medical devices on the network.


• Program Support (10%): Leads the investigation of alerts on medical devices in the hospital and clinics; leads analysis and development of recommendations for response to high/critical vulnerabilities; leads the tracking and reporting of vulnerability remediation activities; identifies opportunities for improvement in cybersecurity practices for HTM and IT; oversees quality control for cybersecurity data and documentation in CMMS.


• Training (5%): Support HTM cybersecurity education & awareness for HTM teams; coaches BMETs on basic cybersecurity hygiene and out of the box controls; participates in industry cybersecurity workgroups and forums as company representative; completes mandatory technical and non-technical training.


• Regulatory and Compliance (5%): Advises on hospital audits involving cybersecurity, including HIPAA and Joint Commission; advises on enterprise cybersecurity audits in alignment with enterprise leadership.

Must-Haves

• Biomedical/Biomed experience or equivalent experience working with medical devices.


• Healthcare cybersecurity experience.


• Experience in medical device cybersecurity or a healthcare technology environment.


• A valid driver’s license and acceptable driving record.


• Strong knowledge of CMMS platforms, cybersecurity frameworks (e.g., NIST, ISO), and FDA/Joint Commission regulations.


• Proven ability to lead technical projects and drive cross-functional alignment.


• Minimum Education Requirement: Bachelor’s degree or equivalent experience


• Minimum Functional Experience: 3 years

Preferred Qualifications

• Relevant certifications (e.g., CISSP, HCISPP, CEH, or Security+) preferred.


• Ideally, experience with patient monitoring applications


• Ideally, experience with telemetry and clinical application platforms


• Ideally, experience with medical device software upgrades


• Ideally, experience with medical device integrations/interfaces


• Ideally, experience with central station environments


• Ideally, experience with connected device ecosystems

Equivalent Experience

Candidates without a biomedical background should have experience working with medical devices. Strong BMET 2 or BMET 3 candidates with exposure to the preferred areas above may be developed into the cyber role.