Senior Embedded IoT Security Engineer (Medical Devices)

Socket.dev; Maplewood (MN); On-site; USD 132,000 - 198,000; Full time

Job summary

Medtronic in the United States seeks a Senior Product Security Engineer – Embedded IoT to own cybersecurity architecture for implantable and connected medical-device platforms.

You will drive Security-by-Design across hardware, firmware, and communications, lead threat modeling, maintain SBOM, and ensure compliance with medical-device cybersecurity standards while collaborating with cross-functional teams.

Qualifications

• Bachelor’s degree with 4 years of relevant experience or Master’s with 2 years in Computer Engineering, Electrical Engineering, Computer Science, or Cybersecurity.
• Extensive experience in embedded security, IoT security, firmware, connected devices, or medical-device development.

Responsibilities

• Define security architecture and requirements for implantable devices, programmers/controllers, gateways, and connected environments.
• Apply Security-by-Design and Defense-in-Depth across hardware, firmware, interfaces, authentication, and data protection.
• Design secure boot, secure element integration, encryption, key management, device identity, and provisioning.
• Lead threat modeling, Security Risk Analysis, attack-surface analysis, and security requirements throughout the device lifecycle.
• Maintain SBOM and software/component security requirements for embedded platforms.
• Define secure communication architecture for BLE and other interfaces, and support secure firmware updates.

Education

Bachelor’s degree in related field

Master’s degree in related field

Job description

Medtronic in the United States seeks a Senior Product Security Engineer – Embedded IoT to own cybersecurity architecture for implantable and connected medical-device platforms.

You will drive Security-by-Design across hardware, firmware, and communications, lead threat modeling, maintain SBOM, and ensure compliance with medical-device cybersecurity standards while collaborating with cross-functional teams.