Senior Product Security Engineering Manager, Mounds View, MN

Cardiac And Vascular Group Cybersecurity Leader

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You'll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

Be a part of a company that thinks differently to solve problems, make progress, and deliver meaningful innovations. The Cardiac and Vascular Group brings all of our cardiac and vascular businesses together into one cross-functional, collaborative operating unit to employ the full breadth of our talent, technologies, products, services, and solutions to address the needs of customers and patients across the globe. Cardiac Rhythm Management offers devices and therapies to treat abnormal heart rhythms, as well as cardiac monitoring solutions.

Be on the frontlines of the emerging area of medical device cybersecurity as an integral member and technical leader within a team responsible for creating, deploying, and monitoring cybersecurity and information security solutions for Medtronic's medical devices and supporting IT infrastructure. Interact with external and internal cybersecurity researchers to identify and remediate vulnerabilities within Medtronic products and systems. Work directly with R&D teams to ensure all relevant security risks are identified and evaluated, and appropriate and well-balanced solutions are implemented. Develop project security management deliverables for regulatory bodies to comply with standards / guidance documents, and successfully communicate cybersecurity technology to customers, regulatory bodies, and other stakeholders.

At Medtronic, we bring bold ideas forward with speed and decisiveness to put patients first in everything we do. In-person exchanges are invaluable to our work. We are working onsite 4 days per week as part of our commitment to fostering a culture of professional growth and cross-functional collaboration as we work together to engineer the extraordinary. This role will require less than 10% of travel to enhance collaboration and ensure successful completion of projects. This position will be located in Mounds View, MN.

Lead and mentor a diverse security team responsible for product and device-oriented cybersecurity activities, including risk assessment, mitigation, and residual risk acceptance in collaboration with R&D, architecture, and IT teams. Develop, recommend, and implement security controls in conjunction with product R&D teams and processes, for product/system-wide needs. Build and maintain product security tools and processes for submission packaging and customer requirement tracking. Oversee security monitoring, incident response, vulnerability assessments, mitigation implementation, and product-level intrusion detection activities. Manage security-related deliverables for regulatory bodies, ensuring compliance with key standards and guidance. Evaluate and test security risks on programs across the entire development lifecycle, including market-released products. Support emerging cybersecurity certification initiatives. Drive the design and implementation of cybersecurity into our products and systems. Additional responsibilities and other duties may be assigned.

Must have: minimum requirements- to be considered for this role, please ensure the minimum requirements are evident in your applicant profile:

• Bachelors degree required
• Minimum of 7 years of relevant experience OR Master's degree with a minimum of 5 years relevant experience OR PhD with 3 years relevant experience.

Nice to have:

• Demonstrated understanding of information security practices, risk management processes, cybersecurity principles, and incident response methodologies
• Demonstrated experience with security architecture, implementation, and monitoring of threats.
• Demonstrated team management, leadership, and teamwork skills
• Demonstrated ability to work in a matrixed responsibility and execution environment
• Demonstrated experience interfacing with customers and other external stakeholders regarding cybersecurity system design and behavior
• Demonstrated strong analytical, problem solving skills
• CISSP or similar certification, or sufficient demonstrated experience and/or formal education in cybersecurity and information assurance.
• Experience as an analyst, engineer, developer, researcher or architect with responsibility and/or demonstratable knowledge in two or more of the following areas: Web and/or Mobile Application security
• Cloud systems architecture and security
• Enterprise and local network infrastructure security
• Code reviews and/or penetration testing
• Risk assessments and cybersecurity regulatory requirements
• Static, dynamic, or interactive code analysis tools and methodologies
• Demonstrated ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies.

Together, we can change healthcare worldwide. At Medtronic, we push the limits of what technology, therapies and services can do to help alleviate pain, restore health, and extend life. We challenge ourselves and each other to make tomorrow better than yesterday. It is what makes this an exciting and rewarding place to be. We want to accelerate and advance our ability to create meaningful innovations but we will only succeed with the right people on our team. Let's work together to address universal healthcare needs and improve patients' lives. Help us shape the future.

The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role. (ADA-United States of America).

A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.

Salary ranges for U.S (excl. PR) locations (USD): $168,800.00 - $253,200.00 This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP). The base salary range is applicable across the United States, excluding Puerto Rico and specific locations in California. The offered rate complies with federal and local regulations and may vary based on factors such as experience, certification/education, market conditions, and location. Compensation and benefits information pertains solely to candidates hired within the United States (local market compensation and benefits will apply for others). The following benefits and additional compensation are available to those regular employees who work 20+ hours per week: Health, Dental and vision insurance, Health Savings Account, Healthcare Flexible Spending Account, Life insurance, Long-term disability leave, Dependent daycare spending account, Tuition assistance/reimbursement, and Simple Steps (global well-being program). The following benefits and additional compensation are available to all regular employees: Incentive plans, 401(k) plan plus employer contribution and match, Short-term disability, Paid time off, Paid holidays, Employee Stock Purchase Plan, Employee Assistance Program, Non-qualified Retirement Plan Supplement (subject to IRS earning minimums), and Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums).

It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities.