Engineering Manager - Product Security

Company Overview:

At Medtronic, we are committed to pushing the boundaries of technology to improve healthcare outcomes. We value innovation, collaboration, and diversity, and we believe that together we can change healthcare worldwide. Join us in our mission to alleviate pain, restore health, and extend life through meaningful innovations.

Position Overview:

We are seeking an Engineering Manager focused on Product Security to lead a dynamic team responsible for developing, implementing, and monitoring security solutions for Medtronic’s cardiac medical devices and infrastructure. This role requires a strategic thinker with strong leadership skills to drive product security initiatives, ensure compliance with regulatory standards, and foster collaboration across various teams.

Key Responsibilities:

• Lead and manage a team of engineers and cybersecurity professionals dedicated to product security for cardiac medical devices.
• Execute a comprehensive Product Security strategy aligned with Medtronic’s cardiac business objectives and regulatory requirements.
• Collaborate with cross-functional global teams (R&D, quality assurance, and regulatory affairs) to integrate security practices throughout the product lifecycle.
• Oversee the identification and remediation of vulnerabilities, ensuring timely and effective incident response.
• Establish and maintain security standards, frameworks, and best practices for product development and deployment.
• Monitor industry trends and emerging technologies to inform security strategies and practices.
• Communicate complex security concepts clearly to diverse stakeholders, including executive leadership, customers, and regulatory bodies.
• Foster a culture of security awareness and continuous improvement within the team and across the organization.
• Manage project timelines, budgets, and resources to ensure successful delivery of product security initiatives.
• Drive best-in-class Product Security design for new cardiac product development, and released products, ensuring scalable and risk-mitigated designs.
• Execute risk-based security assessment processes and implement them across product efforts.
• Build and sustain a product security team capable of assessing and testing new and released cardiac products that transcend technology (ex. embedded, mobile, web application…)

Basic Qualifications:

• Education:

  Bachelor’s degree in engineering, Computer Science, or a related field; advanced degree preferred.

• Experience:

  Minimum of 15+ years of experience in engineering or cybersecurity roles.
• Proven expertise in product security, particularly in medical device or other highly regulated industries.
• Strong understanding of cybersecurity principles, risk management processes, and regulatory requirements for medical devices.
• Demonstrated ability to lead and develop high-performing teams, fostering collaboration and innovation.
• Excellent communication and interpersonal skills to build relationships with internal and external stakeholders.

Desirable Qualifications:

• CISSP, OSCP or similar cybersecurity certifications.
• Experience with IoT devices, embedded, mobile, cloud security, and data protection architectures.
• Familiarity with security incident management and operations center (SOC) practices.
• Knowledge of national and international laws related to medical device cybersecurity.
• Experience in healthcare or other heavily regulated industries.
• Understanding compliance with FDA, GDPR, EUMDR, and other international regulations.

Why Join Us?

At Medtronic, you will be part of a team dedicated to making a difference in the lives of patients worldwide. We offer a collaborative and inclusive work environment where you can thrive and grow your career. Together, we can shape the future of healthcare.