Sr. Product Security Engineer - Post Market Surveillance

Medtronic • Fridley, MN

7d • $132,000 - $198,000

About The Position

The Senior Product Security Engineer – Post Market Surveillance leads cybersecurity activities for fielded medical devices and supporting systems. The role owns vulnerability surveillance, field security event assessment, security impact and risk analysis, post-market compliance, security operations support, and issue disposition through closure. The position supports Medtronic’s Neuromodulation and Pelvic Health R&D organizations, which develop therapies and technologies for conditions including chronic pain, movement disorders, overactive bladder, and non-obstructive urinary retention.

Requirements

• Bachelor’s degree in a related field and 4 years of relevant experience, or a master’s degree in a related field and 2 years of relevant experience. Relevant fields include Computer Engineering, Electrical Engineering, Computer Science, and Cybersecurity.
• Extensive experience in product security, cybersecurity, embedded/software systems, or regulated product development.
• For baccalaureate degrees earned outside the United States, a degree satisfying the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.

Nice To Haves

• Experience with vulnerability management, CVSS, threat modeling, SRA, SBOM/SCA, incident analysis, and medical-device cybersecurity.
• Understanding of medical device regulations and standards, such as FDA pre- and post-market cybersecurity guidance for medical device manufacturers, ISO 13485, and ISO 81001-5-1.
• Strong decision-making skills, including weighing relative costs and benefits to identify appropriate solutions.
• High attention to detail and focus on Good Documentation Practices (GDP).
• Ability to communicate complex technical information creatively and engagingly to diverse audiences, orally and in writing.
• Excellent prioritization skills, including breaking work into manageable parts and assessing priority and time required.
• Demonstrated ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies.

Responsibilities

• Monitor and assess vulnerability signals, field complaints, anomalous behavior, and suspected security events affecting released products.
• Determine applicability, exploitability, severity, and product impact; identify required escalation and coordinate investigation, remediation, and disposition.
• Partner with Risk Management and Systems Engineering to update Security Risk Analysis, threat models, hazard analyses, and residual-risk assessments.
• Maintain visibility of security assets across fielded products, including keys, certificates, credentials, trust anchors, and signing infrastructure.
• Support secure provisioning, certificate and key distribution, rotation, revocation, and retirement with manufacturing and operations teams.
• Maintain Defense-in-Depth, Security-by-Design, security requirements, and SBOM expectations throughout the post-market lifecycle.
• Assess evolving FDA, EU MDR, China, and other cybersecurity requirements and support fielded-product recertification and remediation.
• Map cybersecurity standards and best practices into internal processes and represent Product Security in standards and technical forums.
• Support healthcare professional and customer security and privacy questionnaires, onboarding, and automation of recurring assurance activities.
• Represent Product Security during regulatory audits, FCA, CAPA, quality reviews, and risk-management boards.
• Support root-cause analysis, corrective actions, effectiveness verification, and closure.

Benefits

• Competitive salary and flexible benefits package.
• Short-term incentive through the Medtronic Incentive Plan (MIP).
• Health insurance, dental insurance, and vision insurance for eligible regular employees working 20 or more hours per week.
• Health Savings Account and Healthcare Flexible Spending Account for eligible regular employees working 20 or more hours per week.
• Life insurance and long-term disability leave for eligible regular employees working 20 or more hours per week.
• Dependent daycare spending account and tuition assistance/reimbursement for eligible regular employees working 20 or more hours per week.
• Simple Steps global well-being program for eligible regular employees working 20 or more hours per week.
• Incentive plans, 401(k) plan with employer contribution and match, short-term disability, paid time off, paid holidays, Employee Stock Purchase Plan, Employee Assistance Program, and a Non-qualified Retirement Plan Supplement for regular employees.
• Capital Accumulation Plan for Vice Presidents and above, or subject to IRS earning minimums.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior