PATCH Research Fellow

The PATCH Research Fellow position offers an opportunity for experienced professionals from government, industry, or academia to join a mission-driven team advancing healthcare cybersecurity. The PATCH Research Fellow helps build Whole-Hospital Simulations, realistic testbeds that emulate complex healthcare environments, and Vulnerability Mitigation Platforms that safeguard both clinical and non-clinical networks. This work will directly impact patient safety and digital resilience in some of the most vulnerable healthcare settings. Success in this role will help revolutionize the healthcare penetration testing marketplace by shifting the focus from compliance-based checklists to understanding how gracefully a hospital system fails and recovers under attack. The platforms are also expected to drive a paradigm shift in medical device security regulation, moving evaluation away from individual components and toward system-level thinking across vast networks of interacting medical devices.

The role focuses on applied research and experimentation with these platforms to improve the resilience and security of medical devices, hospital networks, and healthcare delivery systems. PATCH Research Fellows will bring their expertise to guide technical research, mentor students, and collaborate with faculty and industry partners on advancing the state of practice in healthcare cybersecurity.

This position is 100% externally funded and will be considered for reappointment on an annual basis based on the continued availability of funding. Appointments may last from several months up to one year, with the possibility of renewal based on mutual interest and performance.

Knowledge and skills required for this position are typically acquired through the completion of a Masters degree in a technical field or extensive government or industry experience. Significant professional experience in cybersecurity, healthcare technology, embedded systems, or related technical fields is required. PATCH Research Fellows should demonstrate technical expertise in areas such as penetration testing, systems evaluation, requirements engineering, or security of embedded and medical devices. Effective written and verbal communication skills and the ability to collaborate with interdisciplinary teams are essential.

Contribute technical expertise to research on hospital-scale cybersecurity simulations and vulnerability mitigation platforms.

Lead or participate in experimental studies of medical device and healthcare system security, including penetration testing and evaluation of emerging technologies.

Advise faculty, students, and collaborators on technical approaches, research methodologies, and security strategies.

Publish or co-author research papers and technical reports, and share findings with academic, industry, and government partners.

Present research at conferences, workshops, and seminars as appropriate.

Northeastern University considers factors such as candidate work experience, education and skills when extending an offer.  

All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, religion, color, national origin, age, sex, sexual orientation, disability status, or any other characteristic protected by applicable law.

With the pay range(s) shown above, the starting salary will depend on several factors, which may include your education, experience, location, knowledge and expertise, and skills as well as a pay comparison to similarly-situated employees already in the role. Salary ranges are reviewed regularly and are subject to change.