Principal Product Security Engineer - Medical Device
About The Position
Medtronic Cardiac Ablation Solutions is seeking a Principal Product Security Engineer for its R&D organization to help secure cardiac ablation medical device solutions. The role focuses on cybersecurity for medical devices and embedded systems, partnering with engineering teams to integrate security into real-time systems, embedded firmware, connected devices, and other product security contexts. It is not an IT security, compliance, or GRC-focused position. The engineer will support integration of advanced cybersecurity controls, identify and mitigate vulnerabilities, and contribute to initiatives that improve cyber resilience throughout the product lifecycle. The role serves as a technical subject matter expert, mentors others, collaborates across functions, and helps advance long-term product security posture and strategy. The position is based in either Mounds View, Minnesota, or Newton, Massachusetts, and requires onsite work at least four days per week.
Requirements
- Bachelor's degree and a minimum of 7 years of relevant experience, or a Master's degree and a minimum of 5 years of relevant experience, or a PhD and 3 years of relevant experience.
- Strong experience in embedded device security within a regulated industry.
- Strong understanding of cybersecurity concepts and frameworks such as NIST and OWASP.
Nice To Haves
- Deep knowledge of secure software development lifecycle principles and security-by-design practices.
- Experience collaborating with engineering teams to identify and address product security risks.
- Familiarity with medical device cybersecurity standards and guidance, including IEC 81001-5-1, ISO 14971, and FDA premarket and post-market cybersecurity guidance.
- Experience supporting FDA and other regulatory cybersecurity submissions.
- Experience with connected healthcare systems or cloud-connected medical devices.
- Security certifications such as CompTIA Security+, CISSP, or similar.
Responsibilities
- Implement security requirements across the medical device development lifecycle, partnering with cross-functional teams and applying best practices from design through deployment.
- Conduct threat modeling and vulnerability assessments to identify, prioritize, and help mitigate security risks throughout the product lifecycle.
- Support secure medical device design and delivery through capabilities such as secure boot, secure communications, data protection, software update mechanisms, system integration protections, and access controls.
- Apply medical device cybersecurity standards and guidance, including NIST, OWASP, and IEC 81001-5-1, and partner with development teams to strengthen security practices.
- Stay current on cybersecurity trends affecting medical devices and health software, share best practices, and help advance long-term product security strategy.
- Serve as a technical subject matter expert, mentor others, and collaborate across functions to improve product security posture.
Benefits
- Competitive salary and flexible benefits package.
- Short-term incentive through the Medtronic Incentive Plan (MIP).
- Health, dental, and vision insurance (for regular employees working 20 or more hours per week).
- Health Savings Account (for regular employees working 20 or more hours per week).
- Healthcare Flexible Spending Account (for regular employees working 20 or more hours per week).
- Life insurance (for regular employees working 20 or more hours per week).
- Long-term disability leave (for regular employees working 20 or more hours per week).
- Dependent daycare spending account (for regular employees working 20 or more hours per week).
- Tuition assistance or reimbursement (for regular employees working 20 or more hours per week).
- Simple Steps global well-being program (for regular employees working 20 or more hours per week).
- Incentive plans (for all regular employees).
- 401(k) plan with employer contribution and match (for all regular employees).
- Short-term disability (for all regular employees).
- Paid time off (for all regular employees).
- Paid holidays (for all regular employees).
- Employee Stock Purchase Plan (for all regular employees).
- Employee Assistance Program (for all regular employees).
- Non-qualified Retirement Plan Supplement, subject to IRS earning minimums (for all regular employees).
- Capital Accumulation Plan, available to Vice Presidents and above or subject to IRS earning minimums (for all regular employees).
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
