Principal Product Security Engineer - Medical Device

Medtronic's Cardiac Ablation Solutions division seeks a Principal Product Security Engineer to lead cybersecurity initiatives for medical devices and embedded systems. The role focuses on integrating security controls, conducting vulnerability assessments, and driving product security strategy across the development lifecycle.

Responsibilities

• Implement security requirements across medical device development lifecycle with cross-functional teams
• Conduct threat modeling and vulnerability assessments to identify and mitigate security risks
• Support design of secure architectures including secure boot, communications, and data protection
• Apply medical device cybersecurity standards and guide development teams on security practices
• Monitor cybersecurity trends and advance long-term product security strategy

Requirements

• Bachelor's degree plus 7+ years relevant experience, or Master's with 5+ years, or PhD with 3+ years
• Strong embedded device security experience in regulated industries
• Deep knowledge of cybersecurity frameworks including NIST and OWASP
• Secure software development lifecycle and security-by-design principles
• Familiarity with medical device cybersecurity standards like IEC 81001-5-1 and FDA guidance
• Experience collaborating with engineering teams on product security risks
• Security certifications such as CompTIA Security+, CISSP, or equivalent