Principal Medical Device Product Security Engineer

MED Medtronic Inc; Mounds View (MN); On-site; USD 160,000 - 230,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Tuition assistance

Job summary

Medtronic seeks a Principal Product Security Engineer to advance cybersecurity for embedded medical devices within a regulated environment. You will lead security integration across design, hardware, firmware, and software, partnering with engineering teams to strengthen product resilience.

You will mentor peers, drive long-term security strategy, and ensure compliance with NIST/OWASP and IEC 81001-5-1 standards while working onsite in Mounds View, MN or Newton, MA with four days in the office

Qualifications

• Bachelor's degree and a minimum of 7 years of relevant experience in secure medical device development or equivalent.
• Strong experience in embedded device security within a regulated industry.
• Solid understanding of cybersecurity concepts and frameworks such as NIST and OWASP.

Responsibilities

• Product Security - Implement security requirements across the medical device development lifecycle by partnering with cross-functional teams and applying best practices from design through deployment.
• Risk Assessment - Conduct threat modeling and vulnerability assessments to identify, prioritize, and help mitigate security risks throughout the product lifecycle.
• Security Architecture - Support the design and delivery of secure medical devices through implementation of capabilities such as secure boot, secure communications, data protection, software update mechanisms, system integration protections, and access controls.
• Security Standards - Apply medical device cybersecurity standards and guidance, including NIST, OWASP, and IEC 81001-5-1, and partner with development teams to strengthen security practices.
• Technical Leadership - Stay current on cybersecurity trends affecting medical devices and health software, share best practices, and help advance long-term product security strategy.

Skills

Embedded device security

Threat modeling

Vulnerability assessment

Security architecture

Regulated industry experience

NIST/OWASP knowledge

Education

Bachelor's degree in STEM

Master's degree (advantage)

PhD (advantage)

Job description

Medtronic seeks a Principal Product Security Engineer to advance cybersecurity for embedded medical devices within a regulated environment. You will lead security integration across design, hardware, firmware, and software, partnering with engineering teams to strengthen product resilience.

You will mentor peers, drive long-term security strategy, and ensure compliance with NIST/OWASP and IEC 81001-5-1 standards while working onsite in Mounds View, MN or Newton, MA with four days in the office