Senior Medical Device Security Engineer | Cyber Resilience

Medtronic; Lafayette (CO); On-site; USD 132,000 - 198,000; Full time

Benefits offered by this job

Health Insurance

401(k) Plan

Paid time off

Job summary

Medtronic, a global leader in healthcare technology, seeks a Senior Product Security Engineer for the Surgical Operating Unit. Based in Lafayette, CO or North Haven, CT, you will advance cyber resilience across embedded and cloud-connected medical devices and mentor junior engineers.

You will drive threat modeling, risk assessments, secure architecture, and regulatory compliance with IEC, ISO, and FDA guidance, collaborating across R&D, systems, quality, and suppliers.

Qualifications

• Bachelor's degree with 4+ years in cybersecurity, product security, or medical device security.
• Experience with threat modeling and cybersecurity risk assessments.
• Experience integrating cybersecurity into a secure product development lifecycle.
• Experience with vulnerability assessment, penetration testing, and code analysis.
• Experience developing secure architectures for connected products.

Responsibilities

• Develop and advance product security strategy and continuous learning within the unit.
• Drive Secure Product Development Lifecycle across concept to postmarket.
• Lead threat modeling sessions and risk assessments; implement mitigation strategies.
• Design and implement secure architectures (secure boot, secure communications, access control, updates).
• Coordinate vulnerability scans, pen tests, and code analyses; drive risk mitigation.
• Mentor junior engineers and promote security awareness across teams.
• Ensure compliance with IEC, ISO, FDA cybersecurity guidance and NIST standards.
• Review cybersecurity posture of third-party suppliers and OSS components.
• Lead incident investigations and containment efforts; document findings and actions.
• Maintain security documentation and risk registers.

Skills

Threat modeling

Cybersecurity

Secure lifecycle

Embedded security

Regulatory compliance

Mentorship

Education

Bachelor's degree in cybersecurity or related field

Tools

Vulnerability scanners

Static analysis tools

Dynamic analysis tools

Job description

Medtronic, a global leader in healthcare technology, seeks a Senior Product Security Engineer for the Surgical Operating Unit. Based in Lafayette, CO or North Haven, CT, you will advance cyber resilience across embedded and cloud-connected medical devices and mentor junior engineers.

You will drive threat modeling, risk assessments, secure architecture, and regulatory compliance with IEC, ISO, and FDA guidance, collaborating across R&D, systems, quality, and suppliers.