Product Security Engineer

Intellias; Minneapolis (MN); On-site; USD 120,000 - 160,000; Full time

Job summary

Intellias seeks a Senior Product Security Engineer to advance cybersecurity for medical devices, embedded systems, and connected healthcare technologies. The role centers on securing products used in real-world clinical environments, not IT security or SOC tasks.

You will collaborate with engineering teams to integrate cybersecurity into product development, supporting regulatory guidance and secure-by-design practices across the lifecycle.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related technical field.
• 4+ years of experience in Product Security, Embedded Security, Medical Device Security, or related cybersecurity engineering roles.
• Experience securing embedded systems or connected devices within regulated industries.
• Strong understanding of threat modeling and vulnerability assessment.
• Familiarity with cybersecurity frameworks and standards such as NIST and OWASP.
• Experience collaborating directly with engineering teams to identify and mitigate product security risks.
• Strong communication and cross-functional collaboration skills.

Responsibilities

• Partner with software, systems, firmware, and hardware engineering teams to integrate cybersecurity controls throughout the medical device development lifecycle.
• Support secure-by-design initiatives across embedded and connected medical device platforms.
• Help implement and validate security capabilities such as secure boot, secure communications, authentication and authorization, encryption and data protection, software update mechanisms, and access control.
• Conduct threat modeling and vulnerability assessments for medical devices and connected systems.
• Identify, prioritize, and help mitigate cybersecurity risks across product architectures and system integrations.
• Support vulnerability management activities and security remediation efforts.
• Contribute to design and delivery of secure medical device architectures and collaborate with cross-functional teams to improve security posture.

Skills

Threat modeling

Vulnerability assessment

Embedded security

Medical device security

Regulated industries

NIST/OWASP

Cross-functional collaboration

Communication skills

Python scripting

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity or related field

Tools

Python

C/C++

Job description

We are seeking a Senior Product Security Engineer to join a growing R&D organization focused on developing next-generation cardiac ablation and connected medical device solutions.

This role is centered around cybersecurity for medical devices, embedded systems, and connected healthcare technologies. It is not a traditional IT security, SOC, infrastructure, compliance, or GRC-focused position. Instead, we are looking for an engineer who understands how to build secure, reliable, and resilient medical products that operate safely in real-world clinical environments.

The ideal candidate brings hands-on experience working closely with engineering teams to integrate cybersecurity into embedded software, firmware, connected devices, and product development processes within regulated industries.

This position offers the opportunity to become one of the first dedicated Product Security Engineers within the team and collaborate globally with cross-functional engineering and cybersecurity organizations.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related technical field.
• 4+ years of experience in Product Security, Embedded Security, Medical Device Security, or related cybersecurity engineering roles.
• Experience securing embedded systems or connected devices within regulated industries.
• Strong understanding of:
  • threat modeling
  • vulnerability assessment
• Familiarity with cybersecurity frameworks and standards such as NIST and OWASP.
• Experience collaborating directly with engineering teams to identify and mitigate product security risks.
• Strong communication and cross-functional collaboration skills.

Preferred Qualifications

• Experience with cybersecurity for medical devices or healthcare technologies.
• Familiarity with:
  • IEC 81001-5-1
  • ISO 14971
  • FDA premarket and post-market cybersecurity guidance
• Experience supporting cybersecurity activities for FDA submissions or regulated product releases.
• Exposure to connected healthcare systems or cloud-connected medical devices.
• Experience with vulnerability management programs for embedded products.
• Working knowledge of scripting languages such as Python or Bash.
• Security certifications such as: CISSP, CompTIA Security+, GIAC, CEH or similar.

Product Security Engineering

• Partner with software, systems, firmware, and hardware engineering teams to integrate cybersecurity controls throughout the medical device development lifecycle.
• Support secure-by-design initiatives across embedded and connected medical device platforms.
• Help implement and validate security capabilities such as:
  • secure boot
  • secure communications
  • authentication and authorization
  • encryption and data protection
  • software update mechanisms
  • access control and system hardening
• Conduct threat modeling and vulnerability assessments for medical devices and connected systems.
• Identify, prioritize, and help mitigate cybersecurity risks across product architectures and system integrations.
• Support vulnerability management activities and security remediation efforts.

Security Architecture & Engineering Collaboration

• Contribute to the design and delivery of secure medical device architectures.
• Collaborate closely with embedded, firmware, systems, cloud, and platform engineering teams to improve overall product security posture.
• Provide pragmatic engineering guidance balancing cybersecurity, patient safety, usability, and product performance.

Regulatory & Industry Standards

• Apply cybersecurity best practices and frameworks including:
  • NIST
  • OWASP
  • IEC 81001-5-1
  • ISO 14971
  • FDA cybersecurity guidance
• Support security documentation and regulatory activities related to medical device cybersecurity.

Technical Leadership

• Serve as a subject matter expert for product cybersecurity initiatives.
• Mentor engineers and promote secure development practices across teams.
• Stay current on emerging cybersecurity threats, vulnerabilities, and trends impacting medical devices and healthcare technologies.
• Contribute to long-term product security strategy and cyber resilience initiatives.