Sr. Product Security Engineer - Cloud Digital Solutions

Senior Product Security Engineer leads cybersecurity architecture for Medtronic's Digital Health Platforms, cloud services, and connected medical device ecosystems. The role encompasses threat modeling, compliance framework implementation, and secure design of cloud-native applications and remote monitoring solutions.

Responsibilities

• Define security architecture and defense-in-depth strategies for Digital Health Platforms, cloud services, APIs, and connected medical device ecosystems
• Lead threat modeling, security risk analysis, and attack-surface assessment to translate threats into architecture controls and security requirements
• Establish security requirements for data protection, identity management, provisioning, and secure service integration across digital health workflows
• Develop cloud security monitoring, vulnerability management, and DevSecOps requirements while leading compliance certification activities for SOC 2, ISO 27001, and HIPAA frameworks
• Coordinate control implementation, evidence collection, and regulatory alignment across engineering, IT, quality, privacy, and business teams

Requirements

• Bachelor's degree in Computer Science, Engineering, or Cybersecurity with 4 years relevant experience, or Master's degree with 2 years experience
• Extensive cloud security, application security, and cybersecurity architecture experience in regulated software environments
• Strong knowledge of cloud-native security, IAM, APIs, PKI, encryption, and DevSecOps practices
• Experience with threat modeling, Security Risk Analysis, SBOM, and Security-by-Design methodologies
• Familiarity with medical device regulations and standards including FDA guidance, ISO 13485, ISO 27001, SOC 2, and HIPAA
• Excellent technical communication skills for diverse audiences, both written and oral
• Strong decision-making and prioritization capabilities with attention to documentation practices