We anticipate the application window for this opening will close on - 19 Dec 2024

 

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

A Day in the Life

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

The Medtronic Diabetes organization is looking for a Principal Product Security Engineer to join our Software Cybersecurity Organization. Be a technical leader within a team responsible for solutions for Medtronic’s medical devices. Lead the work to security monitoring and secure operation of connected medical device systems.

At Medtronic Diabetes, our IoT solutions, Application and Cloud systems connect a planet’s worth of medical device health data to deliver patient and hospital solutions that make a real difference in how people live their lives every day. This key cybersecurity role is for a hands-on engineer who is detail oriented, entrepreneurial and driven to get her/his products and services delivered with high quality and security You will contribute heavily to our goal of delivering this increasingly complex and interconnected system of components that requires industry-leading security thinking.

You will have an opportunity to contribute to advancing security, while working with other Security Engineers, Architects, Program Managers, and Developers throughout the R&D organization to instill the core security mindset and culture. This job also provides an opportunity to collaborate with the broader Medtronic security leadership team, external and internal cybersecurity researchers, Global IT Organization, and stay on top of current developments for the benefit of Medtronic products and services.

In this role, you will contribute to maintaining cybersecurity of Medtronic Diabetes’ products through:

Leading Risk Management - Train engineering teams on, and facilitate threat modeling, security risk evaluations, and vulnerability assessments to identify and mitigate potential security risks throughout the product lifecycle.

Building Security Awareness - Collaborate with the product R&D teams helping them to understand the security mindset, guiding them to implement specific security controls for product/system wide security needs.

Creating Security Architectures - Contribute to the definition and design of secure medical device architectures and product designs, as well as secure manufacturing and deployment designs.  Collaborate with senior engineers to ensure that security architecture aligns with product security requirements and best practices.

Ensuring Security By Design - Support and lead integration of security into the product development lifecycle, ensuring that security considerations are incorporated from design to deployment. Assist in implementing security measures across full product line – embedded, mobile, and web services. Work closely with cross-functional teams to ensure security is a core part of the product design and development process.

Verifying Secure Implementation - Contribute to security testing activities, including vulnerability scanning, penetration testing, and code reviews. Collaborate with cross-functional teams to ensure adherence to security standards and participate in evaluating testing results to identify and address security vulnerabilities. Provide guidance on testing procedures and contribute to continuous improvement of security practices.

Maintaining Standards Compliance - Assist in maintaining and implementing security standards, policies, and procedures for medical device systems and product development. Ensure our security procedures are in compliance with industry standards and regulations related to medical device and health software product security, such as NIST, IEC 60601-4-5, IEC 81001-5-1, FDA Pre and Post Market Cybersecurity Guidance, ISO 62443, FedRamp, ISO 27001, and others.

Learning Every Day - Participate in ongoing professional development to stay current with emerging cybersecurity trends and threats related to medical devices and health software products.  Update Cybersecurity strategies based on changing best practices.  Perform emerging threat and vulnerability research.  Identify and evaluate new areas for research, perform analysis into emerging threats, including proactive security research on the technologies under consideration for new product capabilities.

Assessing our Vendors - Evaluate third-party vendors and suppliers for their security practices and ensure they mee