Senior Product Security Engineer

Medtronic

. Stay current on emerging cybersecurity threats, technologies, and medical-device and health-software regulations .

Posted 10/12/2026full-timeUnited StatesSenior💰 $132,000 - $198,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity practices, particularly in the context of medical devices and healthcare technologies, with a strong focus on threat modeling, risk assessments, and secure product development lifecycles. Proficient in regulatory compliance and security architecture design, ensuring alignment with industry standards and frameworks.

Highest-signal resume keywords

Cybersecurity Risk AssessmentThreat ModelingSecure Product Development LifecycleMedical Device SecurityRegulatory Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingRisk AssessmentVulnerability AssessmentPenetration TestingStatic AnalysisDynamic AnalysisSecure BootCryptographyData ProtectionAccess Management

Soft Skills

CollaborationMentoringSecurity Awareness Promotion

Tools & Technologies

Embedded SystemsCloud-Connected ProductsIoT DevicesSecurity ArchitectureSecure Communications

Certifications & Qualifications

Certified Information Systems Security Professional (CISSP)Global Information Assurance Certification (GIAC)Certified Ethical Hacker (CEH)

Industry Keywords

IEC 81001-5-1ISO 14971FDA Cybersecurity GuidanceNIST Cybersecurity FrameworkHealthcare Technologies

Tech Stack

Tools & technologies

CloudCyber SecurityIoT

About the role

Key responsibilities & impact

Stay current on emerging cybersecurity threats, technologies, and medical-device and health-software regulations
Contribute to Operating Unit and enterprise-wide product security strategy and roadmap development
Drive security integration throughout the product lifecycle from concept and design through postmarket
Collaborate with system architects, software leads, and hardware engineers to embed secure design patterns in embedded and cloud-connected environments
Lead or contribute to threat modeling sessions and conduct security risk assessments
Identify mitigation strategies in accordance with IEC 81001-5-1, ISO 14971, and FDA premarket cybersecurity guidance
Collaborate on secure architecture and control design, including secure boot, secure communications, data protection, access control, secure software updates, and hardware-software integration
Support and interpret vulnerability scans, penetration tests, and static and dynamic code analysis
Coordinate with internal teams and third-party vendors on risk mitigation
Promote security awareness within Research & Development and mentor junior engineers
Ensure alignment with NIST, IEC 60601-4-5, and IEC 81001-5-1 and support security documentation for global regulatory submissions
Review and assess third-party suppliers and open-source software components
Support investigation and resolution of postmarket security incidents or field issues, including root cause investigations, containment strategies, and risk assessments
Maintain threat model diagrams, risk assessments, shared service inventories, design patterns, security guidelines, and product security plans and reports
Report to the Director of Product Security and serve as a technical subject matter expert

Requirements

What you’ll need

Bachelor's degree with a minimum of 4 years of cybersecurity, product security, software security, embedded systems security, or medical device security experience OR Master's degree with a minimum of 2 years of related experience OR PhD
Experience conducting threat modeling, cybersecurity risk assessments, and risk mitigation activities
Experience integrating cybersecurity practices into a secure product development lifecycle
Experience with vulnerability assessment, penetration testing, static analysis, dynamic analysis, or application security testing methodologies
Experience developing or evaluating security architectures and controls for connected products
Experience securing medical devices, healthcare technologies, embedded systems, Internet of Things (IoT) devices, or cloud-connected products
Knowledge of IEC 81001-5-1, IEC 60601-4-5, ISO 14971, FDA cybersecurity guidance, and National Institute of Standards and Technology (NIST) cybersecurity frameworks
Experience with secure boot, cryptography, authentication, authorization, access management, secure communications, data protection, and secure software update mechanisms
Experience supporting cybersecurity activities within regulated healthcare, life sciences, or medical technology environments
Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Ethical Hacker (CEH), or similar cybersecurity certification (preferred)
For Baccalaureate degrees earned outside of the United States, a degree satisfying 8 C.F.R. § 214.2(h)(4)(iii)(A) is required
Unrestricted U.S. work authorization at the time of hire and for the duration of employment; U.S. work authorization sponsorship is not offered for roles below Principal level

Benefits

Comp & perks

Competitive Salary and flexible Benefits Package
Health, Dental and vision insurance
Health Savings Account
Healthcare Flexible Spending Account
Life insurance
Long-term disability leave
Dependent daycare spending account
Tuition assistance/reimbursement
Simple Steps (global well-being program)
Incentive plans
401(k) plan plus employer contribution and match
Short-term disability
Paid time off
Paid holidays
Employee Stock Purchase Plan
Employee Assistance Program
Non-qualified Retirement Plan Supplement
Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums)
Temporary employees are eligible for paid sick time, as required under applicable state law
Equal employment opportunity and reasonable accommodations for qualified individuals with disabilities