This role pays less than
65%
of similar roles. Most pay
$159,000–$217,500
— the shaded band above.
At the midpoint, this role pays about
$165k
versus about
$188k
for comparable roles.
Based on 240 similar postings.
Employer
About Medtronic
Medtronic plc is the world's largest medical technology company by revenue, specializing in device-based therapies for over 70 health conditions.
Medtronic currently has
56 open roles
on FindRole.
Listed pay typically runs
$124,000–$186,000
across 55 roles with salary data.
Sr. Product Security Engineer - Cloud Digital Solutions leads cybersecurity architecture for Digital Health Platforms, cloud services, web and mobile applications, APIs, and remote monitoring solutions supporting connected medical devices. This role involves defining security-by-design and defense-in-depth architectures, performing threat modeling, and conducting security risk analysis to protect digital ecosystems. The position requires managing SBOMs, overseeing data protection for at-rest and in-transit information, and ensuring compliance with standards like SOC 2, ISO/IEC 27001, and HIPAA. Key technical competencies include cloud-native security, IAM, PKI, encryption, secrets management, containers, DevSecOps, and vulnerability management. The role addresses the critical challenge of securing interconnected medical device infrastructure and digital health workflows while ensuring alignment with stringent medical-device cybersecurity regulations and requirements for data privacy across various connected services and platforms.
Define Security-by-Design and Defense-in-Depth architectures for cloud services, mobile applications, and medical device ecosystems.
Establish security requirements for identity management, encryption, network segmentation, and data protection across digital platforms.
Lead threat modeling, risk analysis, and attack-surface mapping to translate identified threats into technical controls.
Manage Software Bill of Materials (SBOM) and security requirements for containers, APIs, and third-party dependencies.
Design secure protocols for eFOTA orchestration, remote monitoring, and device-to-service authentication.
Develop and execute the application-security roadmap including vulnerability management and DevSecOps integration.
Lead compliance activities and evidence collection for SOC 2, ISO 27001, HIPAA, and other medical device regulations.
Coordinate with engineering and quality teams to ensure alignment with regulatory submissions and data privacy standards.
What we're looking for
A Bachelor's degree in a related field with 4 years of experience or a Master's degree with 2 years of experience is required.
Candidates must have extensive experience in cloud security, application security, digital platforms, cybersecurity architecture, or regulated software development.
Knowledge of cloud-native security, IAM, APIs, PKI, encryption, secrets management, containers, DevSecOps, and data protection is preferred.
Experience with threat modeling, SRA, SBOM/SCA, Security-by-Design, Defense-in-Depth, and regulated medical-device environments is preferred.
Understanding of medical device regulations and standards such as FDA guidance, ISO 13485, ISO 27001, SOC 2, and HIPAA is preferred.
Candidates must possess strong decision-making capabilities to weigh costs and benefits when identifying solutions.
High attention to detail with a focus on Good Documentation Practices (GDP) is required.
Work authorization at the time of hire and for the duration of employment.
Linux
Firmware
Secure Boot
Trusted Execution
Cryptography
Threat Modeling
vulnerability-management
SBOM
C
C++
Python
Container Security
ARM
Edge AI
NIST SSDF
IEC 62443
ISO/SAE 21434
ISO/IEC 27001
ETSI EN 303 645