Director, Cyber Defense

MiniMed Group; Minnesota; Remote; USD 180,000 - 230,000; Full time

Job summary

MiniMed Group is seeking a Director, Cyber Defense to lead Security Operations and Offensive Security, owning strategy, people, services, and technology spanning IT, cloud, identity, data, manufacturing and OT. You will enable detection, investigation, response, and continuous defense improvements company-wide.

The role emphasizes an AI-native approach with automation-first design, detection-as-code, and governed AI agents, while coordinating executive reporting and risk management under

Qualifications

• Requires a Bachelor's degree in a related field (CS, cybersecurity, or equivalent).
• 15+ years of cybersecurity experience with 7+ years in managerial roles.
• Experience leading global or follow-the-sun security operations and serving as incident commander for high-severity incidents.
• Deep knowledge of SIEM, SOAR, EDR/XDR, cloud and identity telemetry, threat intel, threat hunting, forensics and vulnerability management.
• Experience designing automation-first security services using APIs, infrastructure-as-code and runbook-as-code with human oversight.
• Strong understanding of cloud platforms, IAM, encryption, OT, manufacturing security, and privacy/regulatory requirements.

Responsibilities

• Define and execute MiniMed’s Cyber Defense strategy, roadmap, and operating model across IT, cloud, identity, data, manufacturing, and OT.
• Own 24x7x365 Security Operations including monitoring, detection engineering, threat intelligence, incident response, and forensics.
• Serve as senior incident commander for high-severity events and manage escalation, recovery, and reporting.
• Lead the enterprise Offensive Security program: pentesting, red teaming, adversary emulation, and control validation.
• Design AI-native security services: automation-first, API-first, detection-as-code, and governance for AI agents.
• Build and lead a technically strong team; govern vendors, tools, and transition to standalone operating model.

Skills

Cybersecurity leadership

Incident commander

Threat intelligence

Threat hunting

Detection engineering

Automation & AI in security

Education

Bachelor's degree

Tools

SIEM

SOAR

EDR/XDR

Threat intel platforms

Job description

## Director, Cyber DefenseApply: Flexible: Virtual, Minnesota, United States of America: Virtual, Georgia, United States of America: Full time: Posted Today: End Date: October 29, 2026 (9 days left to apply): R-802217We anticipate the application window for this opening will close on - 29 Oct 2026At MiniMed, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world.# **About the Role**The Director, Cyber Defense — Security Operations & Offensive Security is accountable for building and operating MiniMed’s modern cyber defense capability. This leader owns the strategy, people, services, technology, and operating model that enable MiniMed to detect, investigate, respond to, test, and continuously improve its defenses across enterprise IT, cloud, identity, manufacturing and operational technology, applications, data, and connected-product ecosystems. The successful candidate will bring an AI-native mentality to the way security services are designed and delivered. This means redesigning work around automation, APIs, telemetry, detection-as-code, and carefully governed AI agents. Responsibilities may include the following and other duties may be assigned. * Define and execute MiniMed’s Cyber Defense strategy, roadmap, and operating model across enterprise IT, cloud, identity, applications, data, manufacturing and OT, and connected-product supporting services.* Own 24x7x365 Security Operations, including monitoring, detection engineering, threat intelligence, threat hunting, exposure-informed defense, incident response, digital forensics, crisis readiness, and MSSP/MDR performance.* Serve as senior incident commander for high-severity events and maintain the evidence, escalation, recovery, and reporting mechanisms required for executive, legal, privacy, regulatory, and disclosure decisions.* Lead the enterprise Offensive Security program, including penetration testing, red teaming, adversary emulation, purple teaming, attack-path analysis, social engineering, breach-and-attack simulation, and control validation* Design Security Operations as AI-native services: automation-first, API-first, observable, measurable, and delivered through detection-as-code, runbook-as-code, governed AI agents, and reusable integrations.* Build and lead a technically strong team, retain accountability for architecture, risk decisions, sensitive investigations, and incident command, and use managed services, platforms, and specialist providers selectively where they improve speed, quality, resilience, or cost.* Own the build-versus-buy roadmap, vendor and service governance, tooling rationalization, capability sequencing, and transition to MiniMed’s standalone operating model.**Required Knowledge and Experience:** Requires a Bachelor's degree and minimum of 15 years of relevant cybersecurity experience with 7+ years of managerial experience. **Preferred Qualifications:*** Demonstrated experience building or leading a global, distributed, follow-the-sun, or hybrid 24x7 security operations capability and serving as incident commander for high-severity, business-impacting incidents* Deep understanding of SIEM, SOAR, EDR/XDR, cloud and identity telemetry, threat intelligence, threat hunting, digital forensics, detection engineering, vulnerability and exposure management, and security data platforms* Experience designing or operating automation-first security services using APIs, infrastructure-as-code, detection-as-code, runbook-as-code, and AI/ML or agent-enabled workflows with appropriate human oversight* Strong technical understanding of a selection of cloud platforms, operating systems, networking, application and product security, IAM, privileged access, key management, encryption, DLP, endpoint security, OT, and manufacturing environments* Experience managing MSSP/MDR, penetration-testing, threat-intelligence, or other specialist security providers, including build-versus-buy decisions and service performance governance* Certifications such as CISSP, CCSP, CISM, GIAC, OSCP, OSCE, CREST, or equivalent practical expertise; familiarity with NIST CSF, MITRE ATT&CK, OWASP, CIS Controls, FDA cybersecurity expectations, EU regulatory requirements, and relevant privacy and resilience obligations.* Technical and credible leadership style. Calm, decisive, and thoughtful under pressure* Excellent verbal and written communication skills, including the ability to explain technical concepts and technologies to business leaders, and business concepts to the IT Security workforce* Experience in medical devices, healthcare, life sciences, manufacturing, critical infrastructure, or another highly regulated and high-availability environment; experience with connected products, IoT, mobile applications, product-cloud ecosystems, or software update channels is advantageous* Experience operating through a carve-out, separation, major transformation, or transition-services exit, and standing up security capabilities from the ground up.