Senior Product Security Engineer – Software - CRDN

Medtronic•Mounds View, MN

2d•$132,000 - $198,000•Onsite

About The Position

Medtronic’s Coronary and Renal Denervation business is seeking a Senior Product Security Engineer to support approved medical device therapy software and contribute to the design and development of next-generation medical devices and software products. The role focuses on integrating security measures, identifying vulnerabilities, and strengthening cyber-resilience throughout the product lifecycle. The position is based in Mounds View, Minnesota, with on-site work four days per week and less than 10% travel expected. The engineer works with Agile scrum teams and cross-functional partners to incorporate security into product design and development. The role involves threat modeling, security risk and vulnerability assessments, secure medical device architecture, security testing, regulatory compliance, incident response, and detailed security documentation. The successful candidate has prior experience securing software products, cybersecurity and incident-management knowledge, hands-on software development and troubleshooting experience, and experience working in Agile teams. The role requires a bachelor’s degree in a specified technical discipline and at least four years of technical work experience, or an advanced degree in a specified technical discipline and at least two years of technical work experience. The listed U.S. salary range is $132,000–$198,000, and the position is eligible for the Medtronic Incentive Plan. The posting describes a range of benefits for regular employees, with some benefits dependent on working at least 20 hours per week.

Requirements

Bachelor’s degree in computer engineering, electrical engineering, computer science, engineering, or a related technical discipline and at least 4 years of technical work experience; alternatively, an advanced degree in one of these disciplines and at least 2 years of technical work experience.
Previous experience as a security engineer for software products.
Experience in cybersecurity, threat modeling, security incident management, and contributing to proactive security strategies.
Hands-on experience developing, debugging, and troubleshooting software issues.
Experience working in Agile software development teams.

Nice To Haves

At least 2 years of security experience in a regulated industry.
Security certifications such as GSEC, CISSP, CISA, GCIH, or CC.
Bachelor’s degree in a related engineering or cybersecurity field from an accredited institution.
Proficiency in secure coding practices and methodologies.
Ability to adapt to the evolving cybersecurity landscape and contribute to proactive security strategies.
Demonstrated ability to identify challenges and propose effective solutions.
Familiarity with evolving medical device regulations and relevant security standards.

Responsibilities

Support and lead the integration of security into the product development lifecycle, from design through deployment.
Work with Agile scrum teams to make security a core part of product design and development.
Conduct threat modeling, security risk evaluations, and vulnerability assessments, and identify and mitigate risks throughout the product lifecycle.
Contribute to the design and deployment of secure medical device architectures and product designs.
Assist with implementation of secure boot, secure communications, data protection, secure updates, secure integration, and access controls.
Collaborate with senior engineers to align security architecture with product security requirements and best practices.
Assist in maintaining and implementing security standards, policies, and procedures for medical device systems and product development.
Contribute to security testing, including vulnerability scanning, penetration testing, and code reviews.
Help ensure compliance with medical device and health software security standards and regulations, including NIST, IEC 60601-4-5, and IEC 81001-5-1.
Lead and support responses to security incidents, including resolution, mitigation, and communication with stakeholders and, when needed, customers.
Maintain documentation of security best practices, guidance, configurations, design patterns, shared service designs, inventories, incident response plans, security architectures, and reports.
Participate in professional development to stay current with cybersecurity trends and threats affecting medical devices and health software products.

Benefits

Competitive salary and flexible benefits package.
Short-term incentive through the Medtronic Incentive Plan (MIP).
Health insurance.
Dental insurance.
Vision insurance.
Health Savings Account.
Healthcare Flexible Spending Account.
Life insurance.
Long-term disability leave.
Dependent daycare spending account.
Tuition assistance or reimbursement.
Simple Steps global well-being program.
Incentive plans.
401(k) plan with employer contribution and match.
Short-term disability.
Paid time off.
Paid holidays.
Employee Stock Purchase Plan.
Employee Assistance Program.
Non-qualified Retirement Plan Supplement, subject to IRS earning minimums.
Capital Accumulation Plan for Vice Presidents and above or subject to IRS earning minimums.