Sr. Product Security Engineer - Embedded IoT

Medtronic seeks a Senior Product Security Engineer to design cybersecurity architecture and security-by-design strategies for implantable and connected medical devices. The role encompasses embedded systems, device connectivity, cryptography, threat modeling, and regulatory compliance across the device lifecycle.

Responsibilities

• Define security architecture and Security-by-Design requirements for implantable devices, programmers, gateways, and connected environments
• Lead threat modeling, security risk analysis, and attack-surface analysis throughout device lifecycle
• Design secure communication architecture for BLE, wireless interfaces, and remote-monitoring connectivity
• Support secure firmware update architecture including signing, authentication, and anti-rollback mechanisms
• Integrate cybersecurity requirements into product development processes and support regulatory submissions

Requirements

• Bachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, or Cybersecurity with 4+ years relevant experience, or Master's degree with 2+ years
• Extensive experience in embedded security, IoT security, firmware, or connected medical-device development
• Strong knowledge of cryptography, HSM, secure boot, PKI, and BLE/network security
• Experience with threat modeling, Security Risk Assessment, and Security-by-Design methodologies
• Understanding of medical device regulations, FDA guidance, and standards such as ISO 13485
• Excellent written and oral communication skills for technical audiences
• Strong prioritization and relationship-building capabilities