-Principal Product Security Engineer at Medtronic

Lafayette, Colorado, United States

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

Healthcare, Medical DevicesIndustries

Requirements

Deep experience working with engineering teams to integrate cybersecurity into real-time systems, embedded firmware, connected devices, or other product-level security contexts
Expertise in medical device cybersecurity, including familiarity with IEC 81001-5-1, ISO 14971, and FDA premarket cybersecurity guidance
Background in systems, mechanical, electrical, software, or quality engineering, particularly in surgical robotics, surgical energy technologies, or digital solutions
Ability to serve as a technical subject matter expert and mentor, collaborating across teams

Responsibilities

Stay abreast of emerging cybersecurity threats, technologies, and regulations specific to medical devices and health software; contribute to OU and enterprise-wide product security strategy and roadmap development
Drive security integration into all stages of the product lifecycle, from concept and design to postmarket; work closely with system architects, software leads, and hardware engineers to embed secure design patterns in both embedded and cloud-connected environments
Lead threat modeling sessions, conduct security risk assessments, and identify mitigation strategies
Collaborate on the design and implementation of secure architectures, focusing on secure boot, secure communications, data protection, access control, secure software updates, and hardware-software integration
Support and interpret results from vulnerability scans, penetration tests, and security analysis
Report to the Director of Product Security; serve as a technical subject matter expert and mentor, collaborating across teams to improve cyber-resiliency and security posture throughout the product lifecycle

Skills

Cybersecurity

Product Security

Embedded Systems

Firmware Security

Medical Device Security

Vulnerability Mitigation

Real-time Systems

Connected Devices

Cyber-resiliency

Medtronic

Develops and manufactures medical devices and therapies

About Medtronic

Medtronic provides medical technology, services, and solutions to improve patient care. The company develops a variety of medical devices, including pacemakers, insulin pumps, surgical tools, and neurostimulation devices, which help diagnose, prevent, and treat chronic diseases. These products are used by hospitals, clinics, and healthcare professionals around the world. Medtronic stands out from competitors by investing significantly in research and development to create new products and offering additional services like training and patient management programs. The goal of Medtronic is to enhance patient outcomes and lower healthcare costs through its comprehensive range of medical solutions.

Fridley, MinnesotaHeadquarters

1949Year Founded

$3.2MTotal Funding

IPOCompany Stage

Biotechnology, HealthcareIndustries

10,001+Employees