Staff Product Security Engineer

Job ID: 31157791Posted: Posted TodayStart Date: 2026-09-09Location: United States - Minnesota - St. Paul, United States of AmericaTime Type: Full timeAbbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.JOB DESCRIPTION:Working at AbbottAt Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:Career development with an international company where you can grow the career you dream of.Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.An excellent retirement savings plan with a high employer contributionTuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.A company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.The Opportunity At Abbott, we develop life-changing technologies that improve patient outcomes around the world. We are seeking a Senior Product Cybersecurity Engineer who combines strong technical expertise with excellent communication and collaboration skills to help secure next-generation connected medical devices.This position is part of our EP division and will be located onsite at our Tech Center in St. Paul, MN.In this role, you will serve as a cybersecurity leader across the product lifecycle, partnering with software, firmware, hardware, systems engineering, quality, regulatory, and product management teams to ensure security is designed into products from concept through deployment and sustainment.The ideal candidate is a hands-on technical expert in embedded systems, firmware, hardware security, threat modeling, vulnerability management, and security architecture who can also effectively communicate cybersecurity risks, strategies, and compliance requirements to internal stakeholders, customers, auditors, and regulatory agencies.What You’ll Work OnCybersecurity Architecture & Secure Product DesignLead cybersecurity architecture reviews and security-by-design initiatives for connected and embedded medical devices.Drive design discussions and ensure security considerations are incorporated into product architecture, development, and deployment decisions.Design and evaluate secure boot architectures, hardware roots of trust, device identity frameworks, code-signing solutions, certificate management, and secure firmware update mechanisms.Create, review, and maintain security architecture documentation, design specifications, and cybersecurity reports.Collaborate with cross-functional engineering teams to implement secure design practices across software, firmware, hardware, and cloud-connected systems.Embedded Firmware & Hardware SecurityDevelop and review security controls implemented in C/C++, Python, Linux-based systems, and embedded platforms.Assess embedded firmware, operating systems, bootloaders, and hardware platforms for potential security weaknesses.Review and validate:Secure boot implementationsFirmware authentication and validationCryptographic servicesPKI and certificate managementSecure key storageSecure provisioning processesEvaluate hardware security controls, including:Trusted Platform Modules (TPMs)Secure ElementsHardware Security Modules (HSMs)Trusted Execution Environments (TEEs)JTAG/SWD protectionAnti-tamper technologiesThreat Modeling & Risk ManagementConduct threat modeling using STRIDE, OWASP, Attack Trees, and similar methodologies.Identify threats and vulnerabilities impacting patient safety, product integrity, and data protection.Perform cybersecurity risk assessments and document risks in accordance with company and regulatory requirements.Assess CVEs, evaluate product exposure, and recommend mitigation strategies.Maintain and review Software Bills of Materials (SBOMs) and support vulnerability management processes.Security Testing & ValidationDevelop and execute cybersecurity assessment plans and security test strategies.Support or coordinate penetration testing, fuzz testing, firmware analysis, and vulnerability assessments.Review internal and third-party security findings and drive remediation efforts.Define security acceptance criteria and support secure product releases.Validate compliance with established cybersecurity requirements and standards.Regulatory, Customer & External EngagementPartner with Regulatory Affairs, Quality, and Product Security teams to support cybersecurity submissions and compliance activities.Prepare and present cybersecurity documentation for customers, auditors, and regulatory agencies.Serve as a cybersecurity subject matter expert during customer discussions, security assessments, and audits.Clearly communicate technical risks, mitigation strategies, and compliance status to both technical and non-technical audiences.Support responses to customer cybersecurity questionnaires and security requirements.Leadership & CollaborationProvide technical leadership and mentoring to engineering teams.Influence stakeholders across engineering, quality, product management, regulatory, and executive leadership functions.Drive continuous improvement of cybersecurity processes, assessment methodologies, and engineering practices.Foster a culture of collaboration, accountability, and secure product development.Required QualificationsBachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, Software Engineering, Cybersecurity, or related discipline.8+ years of experience in cybersecurity engineering, product security, embedded systems, or related fields.5+ years of hands-on experience securing embedded devices, firmware, medical devices, or IoT products.Strong knowledge of:Secure BootHardware Root of TrustCode SigningPKI and Certificate ManagementCryptographic Key ManagementFirmware Authentication and ValidationVulnerability Assessment and RemediationExperience with:Threat Modeling (STRIDE, OWASP)SBOM generation and analysisCVE management and NVD scoringPenetration testing and security assessmentsLinux administration and embedded platformsProgramming experience in C/C++, Python, Shell scripting, or similar languages.Familiarity with ARM-based processors, embedded Linux, RTOS environments, and connected device architectures.Strong written communication and technical documentation skills.Proven ability to explain complex cybersecurity concepts to engineers, business leaders, customers, and regulators.Preferred QualificationsExperience in medical devices, healthcare technology, or other highly regulated industries.Knowledge of:FDA Cybersecurity GuidanceIEC 62304ISO 14971ISO 27001UL 2900AAMI TIR57/TIR97NIST Cybersecurity FrameworkNIST SP 800-53HIPAA and GDPRExperience with NXP i.MX platforms, Wind River/VxWorks, Secure Elements, TPM technologies, and hardware security testing.Familiarity with hardware attack techniques including fault injection, voltage glitching, side-channel analysis, and physical tampering assessments.Experience interacting directly with customers, assessors, auditors, and regulatory agencies.Success ProfileThe ideal candidate is a technically strong cybersecurity engineer who can:Architect and validate secure embedded systems.Lead technical discussions and influence design decisions.Translate cybersecurity risks into business and regulatory impacts.Build trusted relationships with engineering teams, customers, and regulators.Communicate confidently with audiences ranging from developers to executive leadership.Apply NowLearn more about our health and wellness benefits, which provide the security to help you and your family live full lives: Follow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity.Connect with us at , on Facebook at , and on Twitter @AbbottNews.The base pay for this position is $113,300.00 – $226,700.00In specific locations, the pay range may vary from the range posted.JOB FAMILY:Product DevelopmentDIVISION:EP ElectrophysiologyLOCATION:United States > Minnesota > St. Paul > Tech Center : One St Jude Medical DriveADDITIONAL LOCATIONS:WORK SHIFT:StandardTRAVEL:Yes, 10 % of the TimeMEDICAL SURVEILLANCE:NoSIGNIFICANT WORK ACTIVITIES:Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day), Continuous standing for prolonged periods (more than 2 consecutive hours in an 8 hour day), Keyboard use (greater or equal to 50% of the workday)Abbott is an Equal Opportunity Employer of Minorities/Women/Individuals with Disabilities/Protected Veterans.EEO is the Law link - English: is the Law link - Espanol: