Senior Product Security Engineer: Post-Market Surveillance

Medtronic plc; Fridley (MN); Hybrid; USD 132,000 - 198,000; Full time

Job summary

Medtronic is seeking a Sr. Product Security Engineer for Post Market Surveillance in Fridley, MN.

You will lead cybersecurity activities for fielded medical devices, manage vulnerability signals, assess field events, and perform security risk analyses across the post-market lifecycle. The role collaborates with Risk Management and Systems Engineering to update threat models and SBOMs, supports regulatory compliance, audits, and CAPA processes, and ensures robust security operations and

Qualifications

• Bachelor’s degree in related field with 4 years of relevant experience OR master’s degree in related field with 2 years of relevant experience
• Extensive experience in product security, cybersecurity, embedded/software systems, or regulated product development

Responsibilities

• Monitor and assess vulnerability signals, field complaints, anomalous behavior, and suspected security events affecting released products.
• Determine applicability, exploitability, severity, product impact, and required escalation; coordinate investigation, remediation, and disposition.
• Partner with Risk Management and Systems Engineering to update Security Risk Analysis, threat models, hazard analyses, and residual-risk assessments.
• Maintain visibility of security assets across fielded products, including keys, certificates, credentials, trust anchors, and signing infrastructure.
• Support secure provisioning, certificate/key distribution, rotation, revocation, and retirement with manufacturing and operations teams.
• Maintain Defense-in-Depth, Security-by-Design, security requirements, and SBOM expectations throughout the post-market lifecycle.
• Assess evolving FDA, EU MDR, China and other cybersecurity requirements and support fielded-product recertification and remediation.
• Map cybersecurity standards and best practices into internal processes and represent Product Security in standards and technical forums.
• Support HCP/customer security and privacy questionnaires, onboarding, and automation of recurring assurance activities.
• Represent Product Security during regulatory audits, FCA, CAPA, quality reviews, and risk-management boards.
• Support root-cause analysis, corrective actions, effectiveness verification, and closure.

Skills

Vulnerability management

Threat modeling

Security risk analysis

Embedded systems

Cybersecurity

Communication skills

Education

Bachelor’s degree in related field

Master’s degree in related field

Tools

SBOM/SCA

FDA cybersecurity standards

Job description

Medtronic is seeking a Sr. Product Security Engineer for Post Market Surveillance in Fridley, MN.

You will lead cybersecurity activities for fielded medical devices, manage vulnerability signals, assess field events, and perform security risk analyses across the post-market lifecycle. The role collaborates with Risk Management and Systems Engineering to update threat models and SBOMs, supports regulatory compliance, audits, and CAPA processes, and ensures robust security operations and