Post-Market Security Lead — Medical Device Vulnerability & Compliance

Medtronic plc; Fridley, Northern (MN, KY); Hybrid; USD 132,000 - 198,000; Full time

Benefits offered by this job

Medtronic Incentive Plan (MIP)

Job summary

Medtronic plc is seeking a Sr. Product Security Engineer for Post Market Surveillance in Fridley, MN. You will lead cybersecurity activities for fielded medical devices, manage vulnerabilities, and ensure regulatory compliance through post-market lifecycle processes.

The role focuses on vulnerability surveillance, field event assessment, SBOM management, and security operation support, with collaboration across risk, systems engineering, and regulatory functions.

Qualifications

• Bachelor’s degree in related field with 4 years of relevant experience OR master’s degree with 2 years of relevant experience.
• Extensive experience in product security, cybersecurity, embedded/software systems, or regulated product development.

Responsibilities

• Monitor and manage vulnerability signals, field events, and security impacts for released products.
• Coordinate with Risk Management and Systems Engineering to update risk analyses and threat models.
• Maintain security assets across fielded products, including keys, certificates, credentials and SBOM expectations.
• Support regulatory compliance, product recertification, and privacy inquiries.
• Represent Product Security in audits and CAPA activities and drive root-cause analysis.

Skills

Product security

Cybersecurity

Embedded software

Regulated development

Threat modeling

Vulnerability management

FDA standards

Education

Bachelor’s degree in related field

Master’s degree in related field

Tools

SBOM/SCA

Job description

Medtronic plc is seeking a Sr. Product Security Engineer for Post Market Surveillance in Fridley, MN. You will lead cybersecurity activities for fielded medical devices, manage vulnerabilities, and ensure regulatory compliance through post-market lifecycle processes.

The role focuses on vulnerability surveillance, field event assessment, SBOM management, and security operation support, with collaboration across risk, systems engineering, and regulatory functions.