Lead Product Security Engineer – Medical Devices

Medtronic; Newton (MA); On-site; USD 161,000 - 241,000; Full time

Job summary

Medtronic Cardiac Ablation Solutions (CAS) seeks a Principal Product Security Engineer to join our R&D organization and secure cardiac ablation medical device solutions. You will partner with engineering teams to integrate cybersecurity into real-time systems, embedded firmware, and connected devices, with onsite work in Mounds View MN or Newton MA.

This role focuses on product security throughout the lifecycle, mentoring others and driving improvements in security posture across the

Qualifications

• Bachelor’s degree and a minimum of 7 years of relevant experience.
• OR Master’s degree with a minimum of 5 years of relevant experience.
• OR PhD with 3 years relevant experience.
• Strong experience in embedded device security within a regulated industry.
• Strong understanding of cybersecurity concepts and frameworks such as NIST and OWASP.

Responsibilities

• Product Security - Implement security requirements across the medical device development lifecycle by partnering with cross-functional teams and applying best practices from design through deployment.
• Risk Assessment - Conduct threat modeling and vulnerability assessments to identify, prioritize, and help mitigate security risks throughout the product lifecycle.
• Security Architecture - Support the design and delivery of secure medical devices through implementation of capabilities such as secure boot, secure communications, data protection, software update mechanisms, system integration protections, and access controls.
• Security Standards - Apply medical device cybersecurity standards and guidance, including NIST, OWASP, and IEC 81001-5-1, and partner with development teams to strengthen security practices.
• Technical Leadership - Stay current on cybersecurity trends affecting medical devices and health software, share best practices, and help advance long-term product security strategy.

Skills

Embedded security

Threat modeling

Vulnerability assessment

NIST/OWASP

Technical leadership

Education

Bachelor's degree

Master’s degree

PhD

Job description

Medtronic Cardiac Ablation Solutions (CAS) seeks a Principal Product Security Engineer to join our R&D organization and secure cardiac ablation medical device solutions. You will partner with engineering teams to integrate cybersecurity into real-time systems, embedded firmware, and connected devices, with onsite work in Mounds View MN or Newton MA.

This role focuses on product security throughout the lifecycle, mentoring others and driving improvements in security posture across the