Senior Product Security Engineer – Medical Device Software

Medtronic plc; Minneapolis (MN); Hybrid; USD 132,000 - 198,000; Full time

Benefits offered by this job

Health, Dental and Vision Insurance

401(k) with employer match

Short-term disability leave

Paid time off

Job summary

Medtronic is seeking a Senior Product Security Engineer to join the Coronary & Renal Denervation (CRDN) unit in Minneapolis, MN. You will lead secure software development practices, conduct threat modeling, and implement security features across the product lifecycle.

The role requires strong background in cybersecurity for medical software, agile teams, and experience with secure coding, testing, and incident response.

Qualifications

• Experience in cybersecurity, threat modeling, security incident management, and proactive security strategies.
• Hands-on experience in developing, debugging, and troubleshooting software issues.
• Experience working in agile software development teams.

Responsibilities

• Product Security - integrate security into the product development lifecycle from design to deployment.
• Conduct threat modeling, security risk evaluations, and vulnerability assessments.
• Design and deploy secure medical device architectures with secure boot, secure communications, and data protection.
• Assist in security standards, policies, and testing for medical device systems.
• Ensure compliance with industry standards (NIST, IEC 60601-4-5, IEC 81001-5-1) and manage security incidents.

Skills

Security engineering

Threat modeling

Security incident management

Secure coding practices

Agile software development

Education

Bachelor’s degree in computer engineering / electrical engineering / computer science / engineering

Advanced degree in related field

Job description

Medtronic is seeking a Senior Product Security Engineer to join the Coronary & Renal Denervation (CRDN) unit in Minneapolis, MN. You will lead secure software development practices, conduct threat modeling, and implement security features across the product lifecycle.

The role requires strong background in cybersecurity for medical software, agile teams, and experience with secure coding, testing, and incident response.