Senior Embedded IoT Security Architect

Showcify, Inc.; Fridley (MN); Vor Ort; USD 132.000 - 198.000; Vollzeit

Zusammenfassung

Medtronic in Minnesota is seeking a Senior Product Security Engineer – Embedded IoT to lead cybersecurity architecture for implantable and connected medical-device platforms. You will tackle secure boot, cryptography, device identity, secure provisioning, and secure communications across BLE and wired interfaces, while aligning with regulatory cybersecurity standards.

This role demands strong threat modeling, Security-by-Design, SBOM management, and collaboration with multi-disciplinary teams to

Qualifikationen

• Bachelor’s degree in related field with 4 years of relevant experience or master’s degree with 2 years of relevant experience.
• Extensive experience in embedded security, IoT security, firmware, connected devices, or medical-device development.
• Strong knowledge of cryptography, secure elements, PKI, secure boot, provisioning, firmware signing, BLE/network security, and embedded secure development.
• Experience with threat modeling, Security Risk Assessment, SBOM, Security-by-Design, Defense-in-Depth, and regulated product development.
• Understanding of medical device regulations and standards.
• Strong decision-making capabilities and attention to detail; excellent written and verbal communication.

Aufgaben

• Define security architecture for implantable devices, programmers/controllers, gateways, and connected operating environments.
• Apply Security-by-Design and Defense-in-Depth across hardware, firmware, communication interfaces, authentication, authorization, and data protection.
• Design secure boot, HSM/secure-element integration, encryption, key management, device identity, and secure provisioning.
• Lead threat modeling, Security Risk Analysis, attack-surface analysis, and security requirements throughout the device lifecycle.
• Maintain SBOM and software/component security requirements for embedded platforms.
• Define secure communication architecture for BLE, wired/wireless interfaces, programmers, gateways, and remote-monitoring connectivity.
• Support secure eFOTA/firmware update architecture including signing, authentication, anti-rollback, integrity verification, and recovery.
• Define manufacturing security requirements for device identity, cryptographic key/certificate injection, provisioning, and lifecycle management.
• Integrate cybersecurity requirements into systems, software, hardware, manufacturing, verification, and risk-management processes.
• Support regulatory submissions and compliance with medical-device cybersecurity standards and guidance.

Kenntnisse

Embedded security

IoT security

Firmware security

Cryptography

HSM / Secure element

PKI

Secure boot

Provisioning

BLE security

Threat modeling

SBOM

Regulated development

Medical device regs

Ausbildung

Bachelor’s degree in related field

Master’s degree in related field

Jobbeschreibung

Medtronic in Minnesota is seeking a Senior Product Security Engineer – Embedded IoT to lead cybersecurity architecture for implantable and connected medical-device platforms. You will tackle secure boot, cryptography, device identity, secure provisioning, and secure communications across BLE and wired interfaces, while aligning with regulatory cybersecurity standards.

This role demands strong threat modeling, Security-by-Design, SBOM management, and collaboration with multi-disciplinary teams to