Director, Cyber Defense
About The Position
The Director, Cyber Defense — Security Operations & Offensive Security is accountable for building and operating MiniMed’s modern cyber defense capability. The role owns the strategy, people, services, technology, and operating model used to detect, investigate, respond to, test, and continuously improve defenses across enterprise IT, cloud, identity, manufacturing and operational technology, applications, data, and connected-product ecosystems. The successful candidate brings an AI-native mentality to security service design and delivery, redesigning work around automation, APIs, telemetry, detection-as-code, and carefully governed AI agents. The Director leads a technically strong team and remains accountable for architecture, risk decisions, sensitive investigations, and incident command, while selectively using managed services, platforms, and specialist providers. The role also owns the build-versus-buy roadmap, vendor and service governance, tooling rationalization, capability sequencing, and transition to MiniMed’s standalone operating model.
Requirements
- Bachelor’s degree.
- Minimum 15 years of relevant cybersecurity experience.
- At least 7 years of managerial experience.
- Technical and credible leadership style; calm, decisive, and thoughtful under pressure.
- Excellent verbal and written communication skills, including explaining technical concepts to business leaders and business concepts to the IT Security workforce.
Nice To Haves
- Experience building or leading a global, distributed, follow-the-sun, or hybrid 24x7 security operations capability and serving as incident commander for high-severity, business-impacting incidents.
- Deep understanding of SIEM, SOAR, EDR/XDR, cloud and identity telemetry, threat intelligence, threat hunting, digital forensics, detection engineering, vulnerability and exposure management, and security data platforms.
- Experience designing or operating automation-first security services using APIs, infrastructure-as-code, detection-as-code, runbook-as-code, and AI/ML or agent-enabled workflows with appropriate human oversight.
- Strong technical understanding of cloud platforms, operating systems, networking, application and product security, IAM, privileged access, key management, encryption, DLP, endpoint security, OT, and manufacturing environments.
- Experience managing MSSP/MDR, penetration-testing, threat-intelligence, or other specialist security providers, including build-versus-buy decisions and service performance governance.
- Certifications such as CISSP, CCSP, CISM, GIAC, OSCP, OSCE, CREST, or equivalent practical expertise.
- Familiarity with NIST CSF, MITRE ATT&CK, OWASP, CIS Controls, FDA cybersecurity expectations, EU regulatory requirements, and relevant privacy and resilience obligations.
- Experience in medical devices, healthcare, life sciences, manufacturing, critical infrastructure, or another highly regulated and high-availability environment.
- Experience with connected products, IoT, mobile applications, product-cloud ecosystems, or software update channels.
- Experience operating through a carve-out, separation, major transformation, or transition-services exit, and standing up security capabilities from the ground up.
Responsibilities
- Define and execute MiniMed’s Cyber Defense strategy, roadmap, and operating model across enterprise IT, cloud, identity, applications, data, manufacturing and OT, and connected-product supporting services.
- Own 24x7x365 Security Operations, including monitoring, detection engineering, threat intelligence, threat hunting, exposure-informed defense, incident response, digital forensics, crisis readiness, and MSSP/MDR performance.
- Serve as senior incident commander for high-severity events and maintain evidence, escalation, recovery, and reporting mechanisms for executive, legal, privacy, regulatory, and disclosure decisions.
- Lead the enterprise Offensive Security program, including penetration testing, red teaming, adversary emulation, purple teaming, attack-path analysis, social engineering, breach-and-attack simulation, and control validation.
- Design Security Operations as AI-native services that are automation-first, API-first, observable, and measurable, using detection-as-code, runbook-as-code, governed AI agents, and reusable integrations.
- Build and lead a technically strong team while retaining accountability for architecture, risk decisions, sensitive investigations, and incident command.
- Use managed services, platforms, and specialist providers selectively to improve speed, quality, resilience, or cost.
- Own the build-versus-buy roadmap, vendor and service governance, tooling rationalization, capability sequencing, and transition to MiniMed’s standalone operating model.
Benefits
- Competitive salary and flexible benefits package.
- Health insurance.
- Dental insurance.
- Vision insurance.
- Health Savings Account.
- Healthcare Flexible Spending Account.
- Life insurance.
- Long-term disability leave.
- Dependent daycare spending account.
- Incentive plans.
- 401(k) plan with company match.
- Short-term disability coverage.
- Paid time off and holidays.
- Employee Stock Purchase Plan.
- Employee Assistance Program.
- Eligible employees may have access to a Non-qualified Retirement Plan Supplement and Capital Accumulation Plan, subject to IRS minimum earnings requirements.
- Annual long-term incentive plan eligibility.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
