Senior Medical Device Security Engineer – Post-Market

Medtronic plc; Fridley (MN); On-site; USD 132,000 - 198,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k) plan with employer match

Tuition assistance

Job summary

Medtronic is seeking a Senior Product Security Engineer – Post Market Surveillance to lead cybersecurity activities for fielded medical devices and supporting systems. You will own vulnerability surveillance, field security event assessment, risk analysis, post-market compliance, security operations support, and issue disposition through closure.

The role requires advanced knowledge of product security, cybersecurity, and regulated development, with a strong emphasis on standards, risk analysis,

Qualifications

• Bachelor’s degree with 4+ years in related field or master’s with 2+ years in security.
• Experience in product security, cybersecurity, embedded/software systems, or regulated product development.
• For foreign degrees, meet USCIS requirements under 8 C.F.R. § 214.2(h)(4)(iii)(A).

Responsibilities

• Vulnerability, Field Event & Security Impact Management: monitor signals, assess events, determine impact, coordinate remediation and disposition.
• Security Operations & Product Security Assets: maintain visibility of security assets, support provisioning, rotation, and SBOM expectations.
• Regulatory, Standards & Customer Compliance: assess FDA/EU China cybersecurity requirements and support recertification and remediation.
• Audit, FCA & CAPA: support root-cause analysis, corrective actions, and closure.

Skills

Product security

Cybersecurity

Embedded software

Regulated development

Education

Bachelor’s or Master’s degree in related field

Job description

Medtronic is seeking a Senior Product Security Engineer – Post Market Surveillance to lead cybersecurity activities for fielded medical devices and supporting systems. You will own vulnerability surveillance, field security event assessment, risk analysis, post-market compliance, security operations support, and issue disposition through closure.

The role requires advanced knowledge of product security, cybersecurity, and regulated development, with a strong emphasis on standards, risk analysis,