Principal Product Security Engineer

12 - 16 years

12 - 13 Lacs

Posted:-1 days ago| Platform: Naukri logo

Apply

Work Mode

Work from Office

Job Type

Full Time

Job Description

Responsibilities may include the following and other duties may be assigned
  • Product Security Strategy Continuous Learning - Stay abreast of emerging cybersecurity threats, technologies, and regulations specific to medical devices and health software. Contribute to OU and enterprise-wide product security strategy and roadmap development.
  • Secure Product Development Lifecycle - Drive security integration into all stages of the product lifecycle, from concept and design to postmarket. Work closely with system architects, software leads, and hardware engineers to embed secure design patterns in both embedded and cloud-connected environments.
  • Threat Modeling Risk Assessment - Lead threat modeling sessions, conduct security risk assessments, and identify mitigation strategies in accordance with IEC 81001-5-1, ISO 14971, and FDA premarket cybersecurity guidance.
  • Security Architecture Design - Collaborate on the design and implementation of secure architectures, focusing on secure boot, secure communications, data protection, access control, secure software updates, and hardware-software integration.
  • Security Testing Analysis - Support and interpret results from vulnerability scans, penetration tests, and static/dynamic code analysis. Coordinate with internal teams and third-party vendors to ensure timely and appropriate risk mitigation.
  • Security Awareness Mentorship - Promote a culture of security awareness within RD and provide mentorship to junior engineers. Lead by example through documentation, review participation, and active knowledge sharing.
  • Regulatory Standards Compliance - Ensure alignment with applicable standards (e. g. , NIST, IEC 60601-4-5, IEC 81001-5-1) and support security documentation efforts for global regulatory submissions.
  • Vendor Supply Chain Security - Review and assess the cybersecurity posture of third-party suppliers and open-source software components used within product designs.
  • Incident Response Support - Provide technical leadership during postmarket security incidents or field issues. Lead root cause investigations, containment strategies, and risk assessments.
  • Security Documentation - Maintain comprehensive security documentation, including threat model diagrams, risk assessments, shared service inventories, design patterns, security guidelines, and product security plans/reports.
Required Knowledge and Experience
  • Bachelor s or Master s degree in Computer Science, Electrical Engineering, Cybersecurity, or related field.
  • 12-16 years of experience in product or embedded security, ideally in the medical device or healthcare technology sector.
  • Deep knowledge of product security, secure software development lifecycle (SDLC), cryptography, and secure communication protocols.
  • Experience with regulatory standards (FDA, ISO, IEC) and risk management in healthcare.
  • Strong track record in threat modeling, vulnerability assessment, and security testing.
  • Excellent problem-solving, communication, and collaboration skills.

Medtronic offers a competitive Salary and flexible Benefits Package
This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).


Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

coding practice

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now
Medtronic logo
Medtronic

Medical Equipment Manufacturing

Minneapolis MN

RecommendedJobs for You