About the Opportunity

About the opportunity:

Join a mission-driven team developing advanced cybersecurity platforms that protect hospitals and clinics from cybersecurity threats. This position will help build Whole-Hospital Simulations (WHS)—realistic testbeds that emulate healthcare environments—and Vulnerability Mitigation Platforms (VMPs) that safeguard medical devices and both clinical and non-clinical networks. The work will directly impact patient safety and digital resilience in some of the most vulnerable healthcare settings. If successful, your engineering will revolutionize the healthcare pen testing marketplace to shift from compliance-based thinking to “how gracefully does your hospital fail and how quickly recover when under attack” thinking. The platforms will also cause a paradigm shift in the medical device security regulatory frameworks to shift evaluations from component-level thinking of individual medical devices to whole-hospital system thinking of oodles of interacting medical devices and more.

Key Responsibilities & Accountabilities:

(30%)- As a Full Stack Engineer, the position will l design and build secure, scalable architectures that power advanced cybersecurity platforms for healthcare. The work will include developing intuitive front-end interfaces tailored for hospital IT teams and administrators, ensuring usability in high-stakes environments. On the back end, the worker will create services that enable real-time network mapping, detect vulnerabilities, and support rapid remediation. Together, these systems will help protect critical medical infrastructure and improve digital resilience across healthcare settings.

(30%)- The worker will integrate digital twin technologies and third-party cybersecurity tools to enhance platform realism and threat coverage. The responsibilities include provisioning and managing cloud infrastructure using Terraform, Argo CD, OpenShift, and similar tools to ensure scalable and secure deployments. The position will also contribute to CI/CD pipeline development and automation using Jenkins, GitLab, SonarQube, and Nexus, supporting fast and reliable software delivery. In addition, it will support deployment in Whole-Hospital Simulation (WHS) environments and play a key role in rapid prototyping cycles to test and refine platform capabilities.

(15%)- Collaborate with cross-functional teams including clinicians, hospital administrators, and DevSecOps from several hospitals, medical device manufacturers, and vendors.

(15%)-Troubleshoot production issues, investigate incidents, respond to threats, and fine-tune security tools (support Level 2 operations) in complex environments.

(10%)- Mentor peers, conduct code reviews, and contribute to architectural decisions (based on experience level).

This role involves close collaboration with technical leads and organizational leadership on a single, high-impact cybersecurity platform for healthcare. While the role will receive support and guidance, you’re expected to take ownership of your work and contribute independently.
● You’ll work directly with senior engineers and decision-makers to shape platform architecture and security strategy.
● Day-to-day, you’ll collaborate with cross-functional teams and make technical decisions with light oversight, while staying aligned with project goals.
● As you grow in the role, you’ll help mentor teammates and take the lead on key technical decisions.

Core Qualifications:

● Bachelor’s degree in Computer Science or equivalent experience.
● 3–5 years in software development, DevOps, site reliability engineering, or infrastructure administration.
● Hands-on experience with infrastructure-as-code tools (e.g., Terraform, Argo CD).
● Experience with cloud platforms (AWS, Azure, GCP) and container technologies (Docker, Kubernetes, OpenShift).
● Strong understanding of cybersecurity engineering principles, such as found in NIST SP 800-53rev5 and IETF RFCs on security protocols.
● Proficiency in full stack development (e.g., front-end: React, Angular, Vue.js; Back-End: Node.js, Python, Go, or Java).
● Familiarity with VLANs, VM environments (Linux/Windows), and traffic sniffing tools.
● Experience with configuration management tools (Ansible, Puppet, Chef, SaltStack).
● Database expertise (SQL and NoSQL, i.e. MongoDB).
● Comfort with DevOps practices and CI/CD pipelines in regulated environments.
● Experience with operating systems such as QNX, especially in embedded or medical device contexts.

● Strong communication skills and ability to work with non-technical stakeholders (i.e. clinicians, hospital administrators).

Preferred Skills:

● Experience creating and maintaining software in clinical environments.
● Experience with threat modeling or penetration testing tools.
● Knowledge of healthcare data standards (e.g., FHIR).
● Familiarity with digital twin technologies or network simulation frameworks.
● Experience with log aggregation tools (Splunk, DataDog), monitoring (Prometheus, Nagios), and load balancers (Citrix ADC, Google Cloud Load Balancer).
● Kubernetes CRD and Operator development.
● GitOps and infrastructure lifecycle management.
● Exposure to government-funded R&D programs.

Documents required:

Resume

Cover letter

Position Type

Additional Information

Northeastern University considers factors such as candidate work experience, education and skills when extending an offer.  

All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, religion, color, national origin, age, sex, sexual orientation, disability status, or any other characteristic protected by applicable law.

Compensation Grade/Pay Type:

Expected Hiring Range:

With the pay range(s) shown above, the starting salary will depend on several factors, which may include your education, experience, location, knowledge and expertise, and skills as well as a pay comparison to similarly-situated employees already in the role. Salary ranges are reviewed regularly and are subject to change.