Clinical Engineering Cybersecurity Specialist

About the Role

We are seeking a skilled Clinical Engineering Cybersecurity Specialist to support the medical device cybersecurity program in Far Rockaway, NY.

The ideal candidate will have hands-on experience working with medical equipment or medical devices, combined with knowledge or practical exposure to cybersecurity. This role is suited to a biomedical engineer, biomedical equipment technician (BMET), clinical engineer, or healthcare technology professional who understands medical device operations and can help protect connected medical equipment from cybersecurity threats.

You will work closely with hospital IT, Information Security, Healthcare Technology Management (HTM) teams, and medical device manufacturers to identify security risks, implement cybersecurity controls, and maintain the safety, security, and availability of medical devices.

Medical Device Cybersecurity & Technical

Support

• Support the implementation and ongoing management of medical device cybersecurity strategies.
• Collect critical cybersecurity data elements (CDEs) and manufacturer documentation for medical devices within the CMMS and asset inventory.
• Conduct cybersecurity risk assessments based on collected device information and manufacturer recommendations.
• Oversee medical device configurations to ensure alignment with cybersecurity standards and manufacturer guidelines.
• Coordinate planned vulnerability remediation, including software patching, upgrades, and security updates.
• Support unplanned vulnerability remediation, including assessment and response to zero-day threats.
• Coordinate cybersecurity activities and remediation efforts with medical device manufacturers.
• Test and validate network segmentation rules in collaboration with hospital IT teams.
• Support IT projects that may affect medical devices connected to the hospital network.

Vulnerability Management & Program

Support

• Investigate cybersecurity alerts involving medical devices across the hospital and clinics.
• Analyze high-risk and critical vulnerabilities and develop appropriate response recommendations.
• Track, document, and report vulnerability remediation activities.
• Identify opportunities to improve cybersecurity practices across HTM and IT teams.
• Maintain the accuracy and quality of cybersecurity data and documentation in the CMMS.

Training & Collaboration

• Support cybersecurity education and awareness initiatives for HTM teams.
• Coach Biomedical Equipment Technicians (BMETs) on basic cybersecurity hygiene and device security controls.
• Collaborate with hospital IT, InfoSec, clinical engineering, and equipment manufacturers.
• Participate in relevant industry cybersecurity workgroups and forums.
• Complete required technical and non-technical training.

Regulatory & Compliance

• Support hospital cybersecurity audits involving HIPAA and Joint Commission requirements.
• Provide technical guidance during enterprise cybersecurity audits.
• Help ensure medical device cybersecurity practices align with applicable regulatory and organizational requirements.

Required Qualifications

• Bachelor's degree in Biomedical Engineering, Electrical Engineering, Computer Engineering, Information Technology, Cybersecurity, or a related field; equivalent experience may be considered.
• Minimum of 3 years of relevant functional experience with Biomedical devices.
• Hands-on experience working with medical devices, biomedical equipment, clinical engineering, or healthcare technology environments.
• Knowledge or practical exposure to cybersecurity concepts, preferably involving medical devices or healthcare environments.
• Understanding of medical equipment troubleshooting, configuration, maintenance, or technical support.
• Knowledge of cybersecurity frameworks such as NIST and ISO.
• Familiarity with CMMS platforms and medical equipment asset management.
• Understanding of vulnerability management, risk assessments, security patching, and remediation.
• Knowledge of FDA and Joint Commission requirements relevant to medical devices and healthcare environments.
• Valid driver's license and acceptable driving record.
• Strong communication, problem-solving, documentation, and cross-functional collaboration skills.

Preferred Qualifications

• Direct experience with medical device cybersecurity.
• Experience working with hospital IT, Information Security, or Healthcare Technology Management teams.
• Experience coordinating firmware updates, software upgrades, security patches, or vulnerability remediation for medical equipment.
• Familiarity with medical device networking and network segmentation.
• Relevant certifications such as CompTIA Security+, CEH, CISSP, or HCISPP.
• Experience with cybersecurity risk assessments and manufacturer security documentation.

Compensation & Benefits

Annual Salary: $81,000–$100,000

Compensation will be based on the candidate's education, relevant experience, technical skills, and qualifications.

Benefits may include:

• Medical, dental, and vision insurance
• Wellness programs
• 401(k) with matching contributions
• Paid time off and company holidays
• Career growth opportunities
• Tuition reimbursement

Additional benefit details will be provided during the hiring process.

Important Information

• Work Location: Far Rockaway, NY 11691
• Relocation assistance is not available.
• Candidates must have a valid driver's license and acceptable driving record.
• Candidates must be legally authorized to work in the United States.

We encourage applications from biomedical engineers, biomedical equipment technicians, clinical engineers, medical equipment service professionals, and healthcare technology specialists who combine hands-on medical device experience with cybersecurity knowledge.

Pay: $81,000.00 - $100,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Tuition reimbursement

Work Location: In person