Sr Product Security Engineer

Senior Product Security Engineer role at Medtronic's Surgical Operating Unit, responsible for integrating cybersecurity throughout the medical device product lifecycle. Reports to Director of Product Security and serves as technical expert and mentor across R&D and cross-functional teams.

Responsibilities

• Monitor emerging cybersecurity threats and regulations; contribute to product security strategy and roadmap
• Lead threat modeling sessions, conduct risk assessments, and identify mitigations per regulatory standards
• Collaborate on secure architecture design covering boot, communications, data protection, and software updates
• Support vulnerability scanning, penetration testing, and code analysis; coordinate risk mitigation efforts
• Mentor junior engineers and promote security awareness culture within R&D teams

Requirements

• Bachelor's degree plus 4+ years cybersecurity or product security experience, or Master's plus 2+ years, or PhD
• Threat modeling, cybersecurity risk assessments, and risk mitigation experience
• Experience integrating cybersecurity into secure product development lifecycle
• Vulnerability assessment, penetration testing, static/dynamic analysis, or application security testing experience
• Security architecture and control design experience for connected products
• Medical device, healthcare technology, embedded systems, or IoT security experience preferred
• Knowledge of IEC 81001-5-1, IEC 60601-4-5, ISO 14971, FDA guidance, and NIST frameworks preferred