Sr Product Security Engineer

Medtronic plc; Galway; On-site; EUR 65,000 - 97,000; Full time

Benefits offered by this job

Medtronic Incentive Plan

Flexible benefits

Job summary

Medtronic is seeking a Senior Product Security Engineer for Mobile Applications to help build secure mobile solutions in medical technology. You will collaborate with software engineers, regulatory, and clinical partners to embed security across the software lifecycle and balance safety, usability, and compliance.

Responsibilities include threat modelling, security design reviews, and translating security findings into actionable fixes.

Qualifications

• Bachelor’s degree in Computer Engineering, Software Engineering, Computer Science or related technical discipline.
• 4+ years of cybersecurity or related technical experience, or an advanced degree with 2+ years of relevant experience

Responsibilities

• Lead threat models and security risk assessments for new mobile applications.
• Review application architecture and advising on authentication, authorization, secure communications, API security, and application resilience.
• Translate technical findings into practical recommendations for developers to act on.
• Support regulatory documentation and compliance activities for regulatory submissions.

Skills

Mobile security

SAST

SCA

IAST

DAST

Threat modelling

API security

OWASP MASVS

OWASP Top 10

PKI

JWT

TLS

Python

PowerShell

Cloud apps

FDA guidance

Education

Bachelor’s degree in Computer Engineering/CS

Tools

SBOM analysis

Job description

Careers that change lives start here. Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first — developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact.

A Day in the Life Medtronic At Medtronic, we value what makes you unique. Be part of a company that thinks differently to solve problems, make progress, and deliver meaningful innovations.

Our Purpose At Medtronic Patient Care Systems (PCS), we power the digital heartbeat behind life‑saving cardiac therapies. We build the connected ecosystem that enables clinicians to monitor, manage, and protect millions of patients living with implantable cardiac devices around the world. From secure device connectivity and real-time data platforms to intelligent clinical tools and patient‑facing experiences, PCS transforms complex cardiac data into clarity - helping physicians make faster decisions, improving outcomes, and giving patients greater confidence in their care. Our work ensures that life‑saving therapies are not only delivered securely, safely and reliably, but continuously improved through innovation, insight, and global scale. If you want to build technology that truly matters — join us. Together, we are shaping the future of connected cardiac care and changing lives every single day Come for a job, stay for a career!

A Day in the Life Of

As a Senior Product Security Engineer, Mobile Applications, you will help software teams build secure mobile applications and connected digital health solutions that support life‑changing medical technologies. You’ll work closely with software engineers, architects, quality, regulatory, and clinical partners to embed security across the software development lifecycle. This role is ideal for someone who enjoys solving complex technical problems, partnering with development teams, and translating security requirements into practical, risk‑based solutions. You’ll help ensure products are secure by design while balancing patient safety, usability, regulatory expectations, and engineering efficiency. In this role, no two days are the same. You may be:

• Leading threat models and security risk assessments for new mobile applications
• Reviewing application architecture and recommending security controls
• Helping teams understand results from security testing tools such as SAST, SCA, IAST, and DAST
• Supporting vulnerability investigations, remediation planning, and postmarket security activities
• Preparing cybersecurity documentation for regulatory submissions
• Partnering with teams to improve security processes, tooling, and automation

You will support multiple software development projects at once and serve as a trusted security partner throughout the product lifecycle, from concept through release and post market support.

Application and Product Security

Partner with engineering teams developing mobile apps, Software as a Medical Device (SaMD), APIs, and cloud-connected software eco‑systems.

• Perform secure design and architecture reviews
• Advise on authentication, authorization, secure communications, API security, and application resilience
• Guide teams on mobile security controls such as secure storage, certificate validation, runtime protections, and app hardening
• Translate technical findings into practical recommendations developers can act on

Risk Assessment and Lifecycle Security

• Conduct threat modelling, cybersecurity risk assessments, and vulnerability analysis
• Define security requirements and support secure design decisions
• Review penetration testing results and support remediation efforts
• Help ensure compliance with FDA guidance, IEC 81001-5-1, and evolving global cybersecurity standards and regulations
• Support regulatory and compliance documentation for regulatory submissions and audits, including: Threat models Security risk assessments Security test plans and reports Software Bills of Materials (SBOMs) Security architecture documentation Vulnerability assessments and dispositions Support responses to regulatory questions, customer security assessments, and inspections

Incident Response and Continuous Improvement

• Product Security Incident Response (PSIRT), Coordinated Vulnerability Disclosure (CVD), and post market vulnerability investigations
• Assess exploitability, product impact, and remediation options
• Improve security workflows through automation, tooling, and process enhancements
• Share knowledge and help teams strengthen secure software development practices

Key Skills & Experience

• Application or Product Security
• Mobile application security, including iOS, Android, .NET MAUI, or Xamarin
• Secure Software Development Lifecycle
• API security
• OWASP Top 10 and OWASP MASVS
• Threat modelling
• SAST, SCA, IAST, DAST, and SBOM analysis
• PKI, JWT, TLS, and secure communications
• Python or PowerShell
• Cloud-connected applications
• FDA cybersecurity guidance and IEC 81001-5-1 understanding
• Experience in working in medical device cybersecurity, PSIRT, or coordinated vulnerability disclosure

Minimum Qualifications

• Bachelor’s degree (Level 8 NFQ) in Computer Engineering, Software Engineering, Computer Science or related technical discipline.
• 4+ years of cybersecurity or related technical experience, or an advanced degree with 2+ years of relevant experience

Benefits & Compensation

Medtronic offers a competitive Salary and flexible Benefits Package

Pay range / Rango salarial / Intervalo salarial /Fascia retributiva / Tranche de salaire / Gehaltsband / Salaribereik: Ireland: 64,640.00 EUR - 96,960.00 EUR | This position is eligible for a short‑term incentive called the Medtronic Incentive Plan (MIP).

Physical Job Requirements

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.

It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities.

For sales reps and other patient facing field employees, going into a healthcare settingis considered an essential function of the job and we expect our employees to comply with all credentialing requirements at the hospitals or clinics they support.

This employer participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here.

For updates on job applications, please go to the candidate login page and sign in to check your application status. If you need assistance completing your application please email [e-mail] To request removal of your personal information from our systems please email [e-mail]