Product Security Engineer II

The Neuromodulation and Pelvic Health Operating Units leverage technical resources for critical pre and post market activities by utilizing the Neuro Core R&D organization. The Core R&D Organization brings project and functional teams together by leveraging collaboration across the operating units to employ the full breadth of our talent, technologies, products, services, and solutions to address the needs of customers and patients across the globe. Neuromodulation and Pelvic Health operating units offer devices and therapies to manage chronic pain, movement disorders, overactive bladder, non-obstructive urinary retention and fecal incontinence, and much more!
  
In this role, you will be on the frontlines of the emerging area of medical device security, data protection, and privacy as an integral member and technical leader within a team responsible for assessing risk, and creating, deploying, and monitoring cybersecurity and privacy solutions for Medtronic’s medical devices and supporting system infrastructure. This individual will apply proven communication skills, problem-solving skills, translation of research to product development and knowledge of best practices to guide his/her team on issues related to the design, design characterization and verification testing, operations support and product release. With a focus on post market, this role will also be responsible for the logging, monitoring, and detection activities of the full product portfolio for Neuromodulation and Pelvic Health devices. Work directly with R&D teams to investigate new and emerging security signals, determine impacts to other products, identify security solutions for implementation, and ensure successful deployment of product and product patches to the field. Join a Culture of Collaboration and Innovation.

A Day in the Life
The Product Security Engineer II is a key technical member of the R&D Product Security team. This role will work as a member of a large multi-functional (systems, software, electrical, mechanical, etc.) organization in the security post market space for Neuromodulation and Pelvic Health therapy systems. 

Responsibilities may include the following and other duties may be assigned.

• Detects and mitigates security risks, responds to product security incidents, and works with customers regarding product security related issues.
• Maintains awareness of emerging cybersecurity vulnerabilities and analyzes impact to fielded products.
• Leverages industry tools to conduct post market surveillance activities and collaborate with cross-functional product teams to resolve post-market security issues.
• Identifies potential attack areas and systemic security issues related to threats and vulnerabilities, including recommendations for enhancements or remediation.
• Prepares and delivers written and verbal briefings to message threat modeling findings across medical software and systems.
• Conducts threat or risk demonstrations via live demo or written narrative.
• Champions new process or technology that delivers significant advances.
• Recognizes architectural problem areas and determines ways to effectively resolve them.
• May participate in external standards committees for medical device product security.
• Performs security assessments of company products that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities.
• Designs and develops security features for products including systems, applications and/or solutions.
• Integrates new security features and updates into existing products and ensures the security of all products is maintained throughout the product lifecycle.
• Provides product security engineering recommendations and resolves integration and testing issues.
• Builds a standardized set of security product requirements and produces metrics to report performance against those requirements.
• Reviews and defines security diagnostics and tools to facilitate the analysis and reporting of security events.
• Leads or participates in security architecture and design review meetings.