Senior Cloud Security Engineer - Digital Health Platforms

Medtronic; Fridley (MN); On-site; USD 130,000 - 180,000; Full time

Job summary

Medtronic in Minnesota is seeking a Senior Product Security Engineer – Cloud & Digital Solutions to lead security architecture for Digital Health Platforms, cloud services, and connected devices. You will drive threat modeling, data protection, provisioning, and secure interfaces across ecosystems.

Responsibilities include defining Security-by-Design, cloud-security monitoring, DevSecOps, and coordinating regulatory readiness for SOC 2, ISO 27001, HIPAA, and related standards.

Qualifications

• Bachelor's degree with 4+ years of relevant experience (or master's with 2+ years).
• Experience in cloud security, application security, and regulated software development.
• Knowledge of cloud-native security, IAM, APIs, PKI, encryption, and containers.

Responsibilities

• Define Security-by-Design and Defense-in-Depth for cloud platforms and digital health apps.
• Lead threat modeling, risk analysis, and security requirements for cloud and digital solutions.
• Define data protection, identity, provisioning, and secrets management across ecosystems.
• Establish cloud security monitoring, logging, and DevSecOps practices.
• Support regulatory submissions and alignment with medical-device cybersecurity standards.

Skills

Cloud security

Security architecture

Threat modeling

Regulated software

Communication skills

Education

Bachelor's degree in related field

Masters degree in related field

Tools

DevSecOps

SBOM/SCA

IAM

PKI

Container security

Logging/monitoring

Job description

Medtronic in Minnesota is seeking a Senior Product Security Engineer – Cloud & Digital Solutions to lead security architecture for Digital Health Platforms, cloud services, and connected devices. You will drive threat modeling, data protection, provisioning, and secure interfaces across ecosystems.

Responsibilities include defining Security-by-Design, cloud-security monitoring, DevSecOps, and coordinating regulatory readiness for SOC 2, ISO 27001, HIPAA, and related standards.