Senior Principal Product Security Engineer — Medical Devices

Medtronic; Mounds View (MN); On-site; USD 161,000 - 241,000; Full time

Benefits offered by this job

Health, Dental and Vision insurance

401(k) with employer match

Paid time off

Job summary

Medtronic is seeking a Principal Product Security Engineer to secure cardiac ablation medical devices. Based in the U.S. with onsite work in Mounds View, MN or Newton, MA, you will lead security across the product lifecycle and mentor teams.

You will apply NIST/OWASP guidance, support FDA-related cybersecurity submissions, and drive secure design, patching, and risk mitigation in a regulated environment.

Qualifications

• Strong experience in embedded device security within a regulated industry.
• Strong understanding of cybersecurity concepts and frameworks such as NIST and OWASP.
• Experience with regulatory cybersecurity submissions (FDA) is a plus.

Responsibilities

• Implement security requirements across the medical device development lifecycle by partnering with cross-functional teams.
• Conduct threat modeling and vulnerability assessments to identify and mitigate risks.
• Support the design and delivery of secure medical devices (secure boot, secure communications, data protection, updates).
• Apply medical device cybersecurity standards and guidance (NIST, OWASP, IEC 81001-5-1) to strengthen security practices.
• Provide technical leadership and mentorship to advance product security strategy.

Skills

Embedded device security

Threat modeling

Security architecture

NIST

OWASP

Regulatory standards

Education

Bachelor's degree in a technical field

Master’s degree (preferred)

Tools

Secure boot

Secure communications

Job description

Medtronic is seeking a Principal Product Security Engineer to secure cardiac ablation medical devices. Based in the U.S. with onsite work in Mounds View, MN or Newton, MA, you will lead security across the product lifecycle and mentor teams.

You will apply NIST/OWASP guidance, support FDA-related cybersecurity submissions, and drive secure design, patching, and risk mitigation in a regulated environment.