Senior Product Security Engineer - Medical Devices (Hybrid)

COV Covidien LP; United States; Vor Ort; USD 132.000 - 198.000; Vollzeit

Benefits dieser Stelle

Health insurance

401(k) plan

Paid time off

Zusammenfassung

Medtronic’s Surgical Operating Unit seeks a Senior Product Security Engineer to strengthen cybersecurity across embedded and cloud-connected medical device solutions. You will mentor teams, drive threat modeling, risk assessments, and secure design practices aligned with IEC/FDA guidance.

Onsite collaboration across Lafayette CO or North Haven CT with R&D partners is expected. Responsibilities include integrating security into the product lifecycle, conducting security testing, and contributing

Qualifikationen

• Bachelor's degree with a minimum of 4 years of cybersecurity, product security, software security, embedded systems security, or medical device security experience OR Master's degree with a minimum of 2 years of related experience OR PhD.
• Experience conducting threat modeling, cybersecurity risk assessments, and risk mitigation activities.
• Experience integrating cybersecurity practices into a secure product development lifecycle.
• Experience with vulnerability assessment, penetration testing, static analysis, dynamic analysis, or application security testing methodologies.
• Experience developing or evaluating security architectures and controls for connected products.

Aufgaben

• Product Security Strategy & Continuous Learning - Stay abreast of emerging cybersecurity threats, technologies, and regulations specific to medical devices and health software.
• Secure Product Development Lifecycle - Drive security integration into all stages of the product lifecycle, from concept and design to postmarket.
• Threat Modeling & Risk Assessment - Lead or contribute to threat modeling sessions, conduct security risk assessments, and identify mitigation strategies.
• Security Architecture & Design - Collaborate on the design and implementation of secure architectures, focusing on secure boot, secure communications, data protection, access control, secure software updates, and hardware-software integration.
• Security Testing & Analysis - Support and interpret results from vulnerability scans, penetration tests, and static and dynamic code analysis.
• Security Awareness & Mentorship - Promote a culture of security awareness within Research & Development and provide support to more junior engineers.
• Regulatory & Standards Compliance - Ensure alignment with standards like NIST, IEC 60601-4-5, IEC 81001-5-1, and FDA cybersecurity guidance.
• Vendor & Supply Chain Security - Review cybersecurity posture of third-party suppliers and open-source components.
• Incident Response Support - Support investigations, containment strategies, and risk assessments.
• Security Documentation - Maintain threat models, risk assessments, inventories, design patterns, guidelines, and security plans.

Kenntnisse

Threat modeling

Cybersecurity risk assessments

Secure SDLC

Security architectures

Vulnerability testing

Mentorship

Ausbildung

Bachelor's degree in cybersecurity or related field

Jobbeschreibung

Medtronic’s Surgical Operating Unit seeks a Senior Product Security Engineer to strengthen cybersecurity across embedded and cloud-connected medical device solutions. You will mentor teams, drive threat modeling, risk assessments, and secure design practices aligned with IEC/FDA guidance.

Onsite collaboration across Lafayette CO or North Haven CT with R&D partners is expected. Responsibilities include integrating security into the product lifecycle, conducting security testing, and contributing