Clinical Engineering Cybersecurity Specialist

Steadfast International Services, LLC is hiring a Clinical Engineering Cybersecurity Specialist to support the medical device cybersecurity program at our onsite location in Far Rockaway, NY (11691). This role helps protect connected medical devices by coordinating risk assessments, vulnerability remediation, and device security workflows while partnering closely with hospital IT, InfoSec, Healthcare Technology Management (HTM), clinical engineering, and medical device manufacturers.

In this position, you’ll bring your experience in biomedical and healthcare technology environments alongside practical cybersecurity knowledge to ensure device configurations, cybersecurity data, and remediation activities stay accurate, documented, and aligned with applicable requirements. Compensation is USD 81,000 to 100,000 per year.

Responsibilities

• Support the implementation and ongoing management of medical device cybersecurity strategies.
• Collect and maintain critical cybersecurity data elements (CDEs) and manufacturer documentation for medical devices within the CMMS and asset inventory.
• Perform cybersecurity risk assessments using gathered device information and manufacturer recommendations.
• Oversee medical device configurations to align with cybersecurity standards and manufacturer guidelines.
• Coordinate planned vulnerability remediation activities, including software patching, upgrades, and security updates.
• Support unplanned vulnerability remediation, including assessment and response to zero-day threats.
• Coordinate cybersecurity remediation efforts with medical device manufacturers.
• Test and validate network segmentation rules in collaboration with hospital IT teams.
• Support IT projects that may affect medical devices connected to the hospital network.
• Investigate cybersecurity alerts involving medical devices across the hospital and clinics.
• Analyze high-risk and critical vulnerabilities and provide response recommendations.
• Track, document, and report vulnerability remediation activities.
• Identify opportunities to improve cybersecurity practices across HTM and IT teams.
• Maintain the accuracy and quality of cybersecurity data and documentation in the CMMS.
• Support cybersecurity education and awareness initiatives for HTM teams.
• Coach Biomedical Equipment Technicians (BMETs) on basic cybersecurity hygiene and device security controls.
• Collaborate with hospital IT, InfoSec, clinical engineering, and equipment manufacturers.
• Participate in relevant industry cybersecurity workgroups and forums.
• Complete required technical and non-technical training.
• Support hospital cybersecurity audits involving HIPAA and Joint Commission requirements.
• Provide technical guidance during enterprise cybersecurity audits.
• Support alignment of medical device cybersecurity practices with applicable regulatory and organizational requirements.

Requirements

• Bachelor’s degree in Biomedical Engineering, Electrical Engineering, Computer Engineering, Information Technology, Cybersecurity, or a related field; equivalent experience may be considered.
• Minimum 3 years of relevant functional experience with Biomedical devices.
• Hands-on experience working with medical devices, biomedical equipment, clinical engineering, or healthcare technology environments.
• Knowledge or practical exposure to cybersecurity concepts, preferably involving medical devices or healthcare environments.
• Understanding of medical equipment troubleshooting, configuration, maintenance, or technical support.
• Knowledge of cybersecurity frameworks such as NIST and ISO.
• Familiarity with CMMS platforms and medical equipment asset management.
• Understanding of vulnerability management, risk assessments, security patching, and remediation.
• Knowledge of FDA and Joint Commission requirements relevant to medical devices and healthcare environments.
• Valid driver’s license and acceptable driving record.
• Strong communication, problem-solving, documentation, and cross-functional collaboration skills.

Benefits

• Medical, dental, and vision insurance
• Wellness programs
• 401(k) with matching contributions
• Paid time off and company holidays
• Career growth opportunities
• Tuition reimbursement
• Life insurance
• Health insurance
• Dental insurance
• Paid time off

Preferred qualifications

• Direct experience with medical device cybersecurity.
• Experience working with hospital IT, Information Security, or Healthcare Technology Management teams.
• Experience coordinating firmware updates, software upgrades, security patches, or vulnerability remediation for medical equipment.
• Familiarity with medical device networking and network segmentation.
• Relevant certifications such as CompTIA Security+, CEH, CISSP, or HCISPP.
• Experience with cybersecurity risk assessments and manufacturer security documentation.

Technologies

• CMMS
• NIST
• ISO
• HIPAA
• Joint Commission
• FDA

Important information: This role is onsite in Far Rockaway, NY 11691. Relocation assistance is not available. Candidates must have a valid driver’s license with an acceptable driving record and be legally authorized to work in the United States.