Senior Product Security Engineer — Medical Device Security

Medtronic; Connecticut; Hybrid; USD 132,000 - 198,000; Full time

Benefits offered by this job

Health, Dental and vision insurance

401(k) plan + match

Paid time off

Tuition assistance

Job summary

Medtronic is seeking a Senior Product Security Engineer to advance the security of Surgical Operating Unit medical device solutions. The role reports to the Director of Product Security and involves mentoring, cross-functional collaboration, and driving secure design practices across embedded and cloud-connected systems.

You will lead threat modeling, risk assessments, and security testing, while aligning with IEC, ISO, and FDA cybersecurity guidance to strengthen cyber-resiliency throughout the

Qualifications

• Experience conducting threat modeling, cybersecurity risk assessments, and risk mitigation activities.
• Experience integrating cybersecurity practices into a secure product development lifecycle.
• Experience with vulnerability assessment, penetration testing, static analysis, dynamic analysis, or application security testing methodologies.

Responsibilities

• Product Security Strategy & Continuous Learning: Stay abreast of threats, technologies, and regulations; contribute to strategy and roadmap.
• Secure Product Development Lifecycle: Drive security into all lifecycle stages with embedded and cloud environments.
• Threat Modeling & Risk Assessment: Lead or contribute to threat modeling sessions; assess risks per IEC 81001-5-1, ISO 14971, FDA guidance.
• Security Architecture & Design: Collaborate on secure architectures including secure boot, data protection, access control, secure updates.
• Security Testing & Analysis: Support vulnerability scans, pen tests, static/dynamic analysis; coordinate risk mitigation.
• Security Awareness & Mentorship: Promote security culture; mentor engineers; share knowledge.
• Regulatory & Standards Compliance: Align with NIST, IEC 60601-4-5, IEC 81001-5-1; support regulatory submissions.
• Vendor & Supply Chain Security: Review third-party cybersecurity postures and OSS components.
• Incident Response Support: Investigate incidents; lead root cause and containment actions.
• Security Documentation: Maintain threat models, risk assessments, and security guidelines.

Skills

Threat modeling

Risk assessment

Secure SDLC

Vulnerability testing

Security architecture

Embedded systems

Medical devices

Regulatory standards

Education

Bachelor's degree

Master's degree

Job description

Medtronic is seeking a Senior Product Security Engineer to advance the security of Surgical Operating Unit medical device solutions. The role reports to the Director of Product Security and involves mentoring, cross-functional collaboration, and driving secure design practices across embedded and cloud-connected systems.

You will lead threat modeling, risk assessments, and security testing, while aligning with IEC, ISO, and FDA cybersecurity guidance to strengthen cyber-resiliency throughout the