Sr Product Security Engineer
About The Position
At Medtronic, we bring bold ideas forward with speed and decisiveness to put patients first in everything we do. We’re working onsite 4 days a week at our Minnesota Rice Creek East facility, to drive performance, foster an environment of belonging, and collaborate to inspire as we engineer the extraordinary. At Medtronic, we're driven by our Mission to alleviate pain, restore health, and extend life for millions of people around the world through innovative biomedical devices and solutions. Our people are the foundation of that mission, and together with the Medtronic mindset, we pursue continuous innovation to breach new frontiers of biomedical research. As global connectivity increases, the complexity and security challenges associated with protecting devices, infrastructure, patients, and sensitive data also grow. The Sr. Product Security Engineer is responsible for designing advanced cybersecurity architectures and effective procedural frameworks to support cyber resilience throughout the product life cycle. The primary responsibilities include overseeing all phases of the cyber security life cycle of medical devices. These include proactive initiatives to identify, model, and evaluate cyber security threats, define security measures to mitigate those threats, develop robust implementation strategies, and rigorous verification and validation mechanisms. Proactively engage with cross-functional development teams and prepare reports meeting quality and regulatory requirements.
Requirements
- Previous experience as a cyber security engineer for cloud security products in a regulated industry.
- Experience in cybersecurity, threat modeling, security incident management, and contributing to proactive security strategies.
- Hands-on experience in cyber security architecture, cloud security, and cryptography.
- Experience working in agile software development teams.
- Bachelor's degree in Computer Science or a related field with 4+ years of experience in cyber security, embedded systems security, IoT security, IT security, or a related role.
- Advanced degree in Computer Science or a related field with significant academic work in cyber security and 3+ years of experience in a related role.
- Strong understanding of cyber security concepts and frameworks (e.g. NIST, OWASP)
- Familiarity with security standards such as ISO 27001, ISO 14971, or HITRUST
- Working knowledge of secure software development lifecycle (SDLC) principles and DevSecOps
- Strong understanding of advanced cryptography, Hardware Security Module concepts, and secure key generation and management
- Proactive communication skills to identify, present, and persuade leadership on cyber security risks
- Strong problem-solving and analytical skills
- Ability to collaborate effectively in cross-functional teams
- For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.
Nice To Haves
- Experience with medical devices or regulated industries.
- CompTIA Security+, CISSP, CISM, or similar security certifications.
Responsibilities
- Implement security requirements across the medical device development lifecycle by collaborating with teams to uphold best practices from design to deployment.
- Conduct threat modeling and vulnerability assessments to identify and mitigate security risks throughout the product lifecycle.
- Support the design and deployment of secure medical devices by implementing features like secure boot, communications, data protection, updates, integration, and access controls.
- Implement and mature the digital health platform architecture to meet customer expectations and enable development of digital solutions across Neuromodulation and Pain & Hypertension, including PH My Future, Insights Dashboard, Remote Monitoring, Remote Programming, and the DBS BrainSense Portal.
- Define and execute surveillance strategy across web applications and cloud native platforms.
- Implement and maintain security policies for medical devices following industry standards like NIST, ISO27001, and IEC 81001-5-1.
- Regularly assess compliance and work with development teams to improve security practices.
- Stay updated on cybersecurity trends in medical devices and health software.
- Work with others to improve security strategies and apply best practices.
Benefits
- Health, Dental and vision insurance
- Health Savings Account
- Healthcare Flexible Spending Account
- Life insurance
- Long-term disability leave
- Dependent daycare spending account
- Tuition assistance/reimbursement
- Simple Steps (global well-being program)
- Incentive plans
- 401(k) plan plus employer contribution and match
- Short-term disability
- Paid time off
- Paid holidays
- Employee Stock Purchase Plan
- Employee Assistance Program
- Non-qualified Retirement Plan Supplement (subject to IRS earning minimums)
- Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
