Cloud Product Cybersecurity Engineer

We anticipate the application window for this opening will close on - 17 Jul 2026. At MiniMed, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world. About The Role The Cloud Product Cybersecurity Engineer is responsible for integrating cybersecurity into the design, development, manufacturing, and lifecycle management of MiniMed’s therapy management systems and connected healthcare technologies. This role partners with R&D, software engineering, regulatory affairs, quality assurance, and enterprise security teams to ensure products are designed and maintained with strong security controls and comply with applicable FDA cybersecurity guidance, ISO 27001, NIST, and other cybersecurity frameworks. The engineer will support secure product architecture, threat modeling, vulnerability management, and secure software development practices while ensuring medical device cybersecurity risks are effectively identified, assessed, and mitigated. Secure Product Development Embed cybersecurity requirements into the medical device product lifecycle (SDLC). Define and implement secure design principles for cloud-based software as a medical device and non-medical cloud products. Conduct secure architecture reviews for new products and product updates. Partner with engineering teams to integrate security into DevOps / DevSecOps pipelines. Configure and maintain Cloud Monitoring and CNAPP platforms on cloud products. Define and enforce secure baseline standards for Amazon Machine Images (AMIs). Ensure all AMIs include hardened OS configurations, EDR agents, logging, and telemetry configurations aligned with SOC monitoring requirements. Establish secure container base image standards (minimal OS, distroless, hardened images). Enforce runtime security controls across Kubernetes/ECS environments. Threat Modeling & Risk Management Conduct threat modeling exercises for medical device architectures. Perform cybersecurity risk assessments aligned with recognized risk management processes. Identify attack surfaces including mobile or cloud applications and network integrations. Develop mitigation strategies and security control recommendations. Vulnerability Management Coordinate product vulnerability scanning and penetration testing. Manage vulnerabilities in accordance with coordinated vulnerability disclosure (CVD) processes. Assess vulnerability impact on deployed medical devices. Work with engineering teams to develop secure patches and remediation plans. Support vulnerability intelligence monitoring (e.g., CVE, NVD, ICé-SERT advisories). Security Testing & Validation Conduct static and dynamic code analysis. Support penetration testing and red‑team activities. Validate device security controls including authentication mechanisms, encryption implementations, network protections, and container build time and runtime scans. Ensure security controls are validated during verification and validation (V&V) processes. Security Monitoring & Incident Response Support product security monitoring capabilities for connected devices. Assist in investigating potential product cybersecurity incidents. Participate in post‑market surveillance and vulnerability response processes. Collaborate with enterprise SOC teams when product threats intersect with corporate infrastructure. Work Closely With Product Engineering Privacy and Compliance Teams Security Operations Cloud and Infrastructure Security teams Required Knowledge And Experience

• Requires a Bachelor’s degree and a minimum of 7 years of relevant experience, or an advanced degree with a minimum of 5 years of relevant experience.
• Degree in Computer Science, Cybersecurity, Electrical Engineering, Software Engineering, or related field.
• 7+ years in cybersecurity engineering, application security, or embedded security.
• Experience working with embedded systems or IoT devices.
• Experience with secure software development lifecycle (SSDLC).
• Secure coding practices (C/C++, Python, Java, or similar).
• Network security protocols (TLS, VPN, secure communication).
• Cryptographic implementations.
• Threat modeling methodologies.
• Security testing tools (SAST, DAST, fuzzing).
• Vulnerability management and remediation.
• Experience with SBOM generation tools.
• Familiarity with healthcare interoperability standards (HL7, FHIR, DICOM).
• CISSP, CSSLP, GIAC GICSP, CEH, and/or Certified Medical Device Cybersecurity Professional.

Physical Job Requirements The above statements describe the general nature and level of work being performed by employees assigned to this position. They are not an exhaustive list of all responsibilities and skills required for this position. The physical demands described in the Responsibilities section are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: employees are regularly required to be independently mobile, interact with a computer, and communicate with peers and co‑workers. Contact your manager or local HR to understand specific work conditions and physical requirements. Benefits & Compensation MiniMed offers a competitive salary and flexible benefits package. Salary ranges for U.S (excl. PR) locations: $136,000.00 – $230,000.00. For roles located in California, Seattle WA, Washington DC, Boston MA, and NewYork City, the salary range is $150,000.00 – $256,000.00. Compensation and benefits vary based on experience, education, certifications, skills, market conditions, internal equity, and geographic location. This position is eligible for a short‑term incentive called the Short Term Incentive (STI). Regular employees working 20 or more hours per week are eligible for a robust benefits package, including health, dental, and vision insurance, a Health Savings Account, Healthcare Flexible Spending Account, life insurance, long‑term disability leave, and a dependent daycare spending account. All regular employees enjoy incentive plans, a 401(k) plan with company match, short‑term disability coverage, paid time off and holidays, participation in our Employee Stock Purchase Plan, and access to our Employee Assistance Program. Eligible employees may also benefit from our Non‑qualified Retirement Plan Supplement and Capital Accumulation Plan, subject to IRS minimum earnings requirements. “Regular employees” refers to those who are not temporary staff such as interns; some benefits may not apply to employees in Puerto Rico. For further details about our comprehensive benefits, we encourage you to visit the link below. About MiniMed MiniMed is a full‑stack insulin delivery company dedicated to supporting people living with diabetes through every step of their journey. For more than 40 years, we’ve been committed to redefining what’s possible: intelligent dosing systems designed for real life, predictive insights that stay a step ahead, and always‑on support when it’s needed most. At the heart of everything we do is a simple mission: to make every day a better day for people with diabetes. MiniMed provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, familial status, membership or activity in a local human rights commission, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. MiniMed will also provide reasonable accommodations for qualified individuals with disabilities. If you are applying to perform work in any position that may involve working at least two hours per week in the unincorporated areas of Los Angeles County, we list material job duties that MiniMed reasonably believes that a criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of a conditional offer of employment. MiniMed will consider qualified job applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. #J-18808-Ljbffr Mini Med