Principal Cybersecurity Engineer

Principal Cybersecurity Engineer

A Day in the Life

You will drive cybersecurity excellence within our OT environments by:

• Leading OT risk assessments

  , identifying and rating risks based on the established risk matrix.

• Maintaining the risk register

  and tracking risks specifically related to manufacturing environments.

• Ensuring compliance

  with NIST CSF, NIS 2, and other relevant cybersecurity frameworks and regulations.

• Collaborating with IT, OT, and compliance teams

  to align cybersecurity policies with operational requirements.

• Establishing and maintaining OT security governance frameworks, policies, and procedures.

• Defining roles and responsibilities

  for OT security within manufacturing operations.

• Developing tailored security awareness programs

  for OT personnel, engineers, and plant operators.

• Providing guidance

  on secure architecture, network segmentation, and access controls for OT systems.

• Supporting the cybersecurity incident response process

  , including detection, response, and recovery planning.

• Collaborating with IT security teams, SOC analysts, and plant personnel

  to investigate and mitigate security incidents.

• Ensuring disaster recovery plans incorporate IT and OT system resilience and recovery.

• Assisting manufacturing teams

  with initial documentation of disaster recovery plans, tabletop exercises, and tracking updates.

• Acting as a key advisor

  for manufacturing operations teams and cybersecurity stakeholders.

• Developing training

  on IT and OT security risks, governance frameworks, and compliance expectations.

• Facilitating security awareness sessions

  for IT and OT engineering teams.

Required Qualifications and Experience

• Bachelor's degree

  in Cybersecurity, Information Technology, Engineering, or a related field with

  14+ years of overall experience.

• 5+ years of experience

  in OT security, risk management, or governance in manufacturing, energy, or critical infrastructure.

• Strong knowledge of ICS/SCADA systems

  , industrial protocols (Modbus, OPC, DNP3, etc.), and IT and OT asset management.

• Experience with risk assessment methodologies

  , audit frameworks, and regulatory compliance.

• Familiarity with frameworks

  like NIST 800-82, IEC 62443, ISO 27001, and the Purdue Model for ICS Security.

• Strong communication and leadership skills

  for cross-functional collaboration.

Preferred Qualifications

• Industry certifications:

  CISM, CISSP, CRISC, GICSP, ISA 62443, or equivalent.
• Experience with

  vulnerability management, threat modeling, and incident response

  in manufacturing environments.
• Knowledge of

  firewalls, network segmentation, and endpoint protection

  for ICS environments.

Benefits & Compensation

Medtronic offers a competitive Salary and flexible Benefits Package. We are committed to our employees, recognizing their contributions and providing resources to support you at every career and life stage.

About Medtronic

Medtronic leads global healthcare technology, boldly attacking the most challenging health problems facing humanity by searching out and finding solutions. Our Mission to alleviate pain, restore health, and extend life unites a global team of 95,000+ passionate people. We are engineers at heart, putting ambitious ideas to work to generate real solutions for real people, leveraging talent, diverse perspectives, and courage to engineer the extraordinary.