Senior IoT Security Engineer - Embedded Devices

Medtronic plc; Fridley (MN); Hybrid; USD 132,000 - 198,000; Full time

Benefits offered by this job

Health, Dental and Vision Insurance

Health Savings Account

401(k) plan with employer match

Tuition reimbursement

Job summary

Medtronic plc is seeking a Sr. Product Security Engineer for embedded IoT to drive cybersecurity architecture for implantable and connected medical devices.

You will design secure boot, key management, and protected provisioning across hardware and firmware environments. The role emphasizes threat modeling, secure communications, and SBOM maintenance, with a focus on medical-device cybersecurity standards and regulatory guidance.

Qualifications

• Bachelor’s degree in related field with 4 years of relevant experience or Master’s degree with 2 years of relevant experience.
• Extensive experience in embedded security, IoT security, firmware, connected devices, or medical-device development.
• Strong knowledge of cryptography, SBOM, secure-by-design concepts and regulatory product development.

Responsibilities

• Define security architecture and requirements for implantable devices and connected environments.
• Lead threat modeling and security risk analysis throughout the device lifecycle.
• Define secure communication architecture for BLE and wired interfaces, and secure provisioning and firmware updates.
• Support regulatory submissions and compliance with medical-device cybersecurity standards.

Skills

Embedded security

IoT security

Firmware security

Threat modeling

Cryptography

Communication

Education

Bachelor's degree in related field

Master's degree in related field

Tools

Secure boot

HSM/secure element

Firmware signing

Job description

Medtronic plc is seeking a Sr. Product Security Engineer for embedded IoT to drive cybersecurity architecture for implantable and connected medical devices.

You will design secure boot, key management, and protected provisioning across hardware and firmware environments. The role emphasizes threat modeling, secure communications, and SBOM maintenance, with a focus on medical-device cybersecurity standards and regulatory guidance.