Sr. Product Security Engineer - Post Market Surveillance

Medtronic•Fridley, MN

5d•$132,000 - $198,000

About The Position

The Senior Product Security Engineer – Post Market Surveillance leads cybersecurity activities for fielded medical devices and supporting systems. The role owns vulnerability surveillance, field security event assessment, security impact and risk analysis, post-market compliance, security operations support, and issue disposition through closure. The position supports Medtronic’s Neuromodulation and Pelvic Health R&D organizations, which develop therapies and devices for conditions including chronic pain, movement disorders, overactive bladder, and non-obstructive urinary retention. The engineer works across product security, risk management, systems engineering, manufacturing, operations, and regulatory stakeholders to assess field issues, maintain security assets and controls, support compliance, and drive corrective actions to closure.

Requirements

Bachelor’s degree in a related field and 4 years of relevant experience, or a master’s degree in a related field and 2 years of relevant experience. Relevant fields include Computer Engineering, Electrical Engineering, Computer Science, and Cybersecurity.
Extensive experience in product security, cybersecurity, embedded/software systems, or regulated product development.
For baccalaureate degrees earned outside the United States, a degree satisfying the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.

Nice To Haves

Experience with vulnerability management, CVSS, threat modeling, SRA, SBOM/SCA, incident analysis, and medical-device cybersecurity.
Understanding of medical device regulations and standards, such as FDA pre- and post-market guidance on cybersecurity for medical device manufacturers, ISO 13485, and ISO 81001-5-1.
Strong decision-making capabilities, weighing relative costs and benefits to identify the most appropriate solution.
High attention to detail with a focus on Good Documentation Practices (GDP).
Ability to communicate complex technical information creatively and engagingly to diverse audiences, orally and in writing.
Excellent prioritization skills, including breaking down work into manageable parts and assessing priority and time required.
Demonstrated ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies.

Responsibilities

Monitor and assess vulnerability signals, field complaints, anomalous behavior, and suspected security events affecting released products.
Determine applicability, exploitability, severity, product impact, and required escalation; coordinate investigation, remediation, and disposition.
Partner with Risk Management and Systems Engineering to update Security Risk Analysis, threat models, hazard analyses, and residual-risk assessments.
Maintain visibility of security assets across fielded products, including keys, certificates, credentials, trust anchors, and signing infrastructure.
Support secure provisioning, certificate/key distribution, rotation, revocation, and retirement with manufacturing and operations teams.
Maintain Defense-in-Depth, Security-by-Design, security requirements, and SBOM expectations throughout the post-market lifecycle.
Assess evolving FDA, EU MDR, China, and other cybersecurity requirements and support fielded-product recertification and remediation.
Map cybersecurity standards and best practices into internal processes and represent Product Security in standards and technical forums.
Support HCP/customer security and privacy questionnaires, onboarding, and automation of recurring assurance activities.
Represent Product Security during regulatory audits, FCA, CAPA, quality reviews, and risk-management boards.
Support root-cause analysis, corrective actions, effectiveness verification, and closure.

Benefits

Competitive salary and flexible benefits package.
Short-term incentive through the Medtronic Incentive Plan (MIP).
Health insurance.
Dental insurance.
Vision insurance.
Health Savings Account.
Healthcare Flexible Spending Account.
Life insurance.
Long-term disability leave.
Dependent daycare spending account.
Tuition assistance/reimbursement.
Global well-being program (Simple Steps).
Incentive plans.
401(k) plan with employer contribution and match.
Short-term disability.
Paid time off.
Paid holidays.
Employee Stock Purchase Plan.
Employee Assistance Program.
Non-qualified Retirement Plan Supplement, subject to IRS earning minimums.
Capital Accumulation Plan, available to Vice Presidents and above or subject to IRS earning minimums.