Clinical Engineering Cybersecurity Specialist

Steadfast International Services, LLC is hiring a Clinical Engineering Cybersecurity Specialist to strengthen the medical device cybersecurity program from Far Rockaway, NY. This onsite role supports safer connected care by coordinating risk assessments, vulnerability remediation, device configuration, and cross-team collaboration across hospital IT, InfoSec, HTM, and medical device manufacturers.

What You’ll Get

• Medical, dental, and vision insurance
• Wellness programs
• 401(k) with matching contributions
• Paid time off and company holidays
• Life insurance
• Career growth opportunities
• Tuition reimbursement

Responsibilities

• Support the implementation and ongoing management of medical device cybersecurity strategies.
• Collect critical cybersecurity data elements (CDEs) and manufacturer documentation for medical devices within the CMMS and asset inventory.
• Conduct cybersecurity risk assessments using collected device information and manufacturer recommendations.
• Oversee medical device configurations to align with cybersecurity standards and manufacturer guidelines.
• Coordinate planned vulnerability remediation, including software patching, upgrades, and security updates.
• Support unplanned vulnerability remediation, including assessment and response to zero-day threats.
• Coordinate cybersecurity activities and remediation efforts with medical device manufacturers.
• Test and validate network segmentation rules in collaboration with hospital IT teams.
• Support IT projects that may affect medical devices connected to the hospital network.
• Investigate cybersecurity alerts involving medical devices across the hospital and clinics.
• Analyze high-risk and critical vulnerabilities and develop response recommendations.
• Track, document, and report vulnerability remediation activities.
• Identify opportunities to improve cybersecurity practices across HTM and IT teams.
• Maintain the accuracy and quality of cybersecurity data and documentation in the CMMS.
• Support cybersecurity education and awareness initiatives for HTM teams.
• Coach Biomedical Equipment Technicians (BMETs) on basic cybersecurity hygiene and device security controls.
• Collaborate with hospital IT, InfoSec, clinical engineering, and equipment manufacturers.
• Participate in relevant industry cybersecurity workgroups and forums.
• Complete required technical and non-technical training.
• Support hospital cybersecurity audits involving HIPAA and Joint Commission requirements.
• Provide technical guidance during enterprise cybersecurity audits.
• Help ensure medical device cybersecurity practices align with applicable regulatory and organizational requirements.

Requirements

• Bachelor’s degree in Biomedical Engineering, Electrical Engineering, Computer Engineering, Information Technology, Cybersecurity, or a related field; equivalent experience may be considered.
• Minimum of 3 years of relevant functional experience with Biomedical devices.
• Hands-on experience working with medical devices, biomedical equipment, clinical engineering, or healthcare technology environments.
• Knowledge or practical exposure to cybersecurity concepts, preferably involving medical devices or healthcare environments.
• Understanding of medical equipment troubleshooting, configuration, maintenance, or technical support.
• Knowledge of cybersecurity frameworks such as NIST and ISO.
• Familiarity with CMMS platforms and medical equipment asset management.
• Understanding of vulnerability management, risk assessments, security patching, and remediation.
• Knowledge of FDA and Joint Commission requirements relevant to medical devices and healthcare environments.
• Valid driver’s license and acceptable driving record.
• Strong communication, problem-solving, documentation, and cross-functional collaboration skills.

Technologies

• CMMS
• NIST
• ISO
• HIPAA
• Joint Commission
• FDA

Preferred Qualifications

• Direct experience with medical device cybersecurity.
• Experience working with hospital IT, Information Security, or Healthcare Technology Management teams.
• Experience coordinating firmware updates, software upgrades, security patches, or vulnerability remediation for medical equipment.
• Familiarity with medical device networking and network segmentation.
• Relevant certifications such as CompTIA Security+, CEH, CISSP, or HCISPP.
• Experience with cybersecurity risk assessments and manufacturer security documentation.

Important Information

• Work Location: Far Rockaway, NY 11691 (onsite)
• Relocation assistance: Not available
• Authorization: Candidates must be legally authorized to work in the United States
• Driving: Valid driver’s license and acceptable driving record required