Staff Product Security Engineer

Abbott

Confirmed live today High trust

Quick summary

Work type
On-site
Location
St. Paul, MN
Salary
$99,300–$198,700 / yr
Employment
Full-time
Posted
68 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $185k
This role $149k
$83k $251k
below market most similar roles pay here above market

This role pays less than 78% of similar roles. Most pay $151,475–$218,431 — the blue band above. At the midpoint, this role pays about $149k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About Abbott

Abbott Laboratories is a global healthcare company that manufactures and markets a broad and diversified line of health care products including diagnostics, medical devices, nutritionals, and branded generic pharmaceuticals. Industry: Healthcare & Medical Devices

Abbott currently has 193 open roles on FindRole.

Listed pay typically runs $99,300–$198,700 across 123 roles with salary data.

Most-posted roles

View all roles at Abbott

At a glance

TL;DR · Staff Product Security Engineer

The Staff Product Security Engineer joins the EP division to secure next-generation connected medical devices. This role serves as a cybersecurity leader across the product lifecycle, partnering with software, firmware, hardware, and regulatory teams to ensure security is designed into products from concept through deployment. You will lead architecture reviews, design secure boot frameworks, manage PKI and certificate services, and develop security controls for embedded platforms. Key responsibilities include conducting threat modeling using STRIDE and OWASP, performing vulnerability assessments, and managing Software Bills of Materials. You will utilize C/C++, Python, and Linux-based systems to validate cryptographic services and hardware roots of trust like TPMs and Secure Elements. The work focuses on protecting patient safety and product integrity within highly regulated healthcare technology environments.

What you'll do

  • Lead cybersecurity architecture reviews and security-by-design initiatives for connected and embedded medical devices.
  • Design and evaluate secure boot architectures, hardware roots of trust, and secure firmware update mechanisms.
  • Develop and review security controls implemented in C/C++, Python, and Linux-based embedded platforms.
  • Conduct threat modeling using STRIDE and OWASP methodologies to identify vulnerabilities impacting patient safety.
  • Perform cybersecurity risk assessments and maintain Software Bills of Materials (SBOMs) for product compliance.
  • Develop and execute cybersecurity assessment plans, including penetration testing and fuzz testing.
  • Prepare and present cybersecurity documentation and risk mitigation strategies for customers, auditors, and regulatory agencies.
  • Provide technical leadership and mentoring to engineering teams to foster secure product development practices.

What we're looking for

  • Bachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, Software Engineering, Cybersecurity, or a related discipline.
  • 8+ years of experience in cybersecurity engineering, product security, embedded systems, or related fields.
  • 5+ years of hands-on experience securing embedded devices, firmware, medical devices, or IoT products.
  • Proficiency in programming languages including C/C++, Python, and Shell scripting.
  • Expertise in secure boot, hardware root of trust, code signing, PKI, certificate management, and cryptographic key management.
  • Experience with threat modeling (STRIDE, OWASP), SBOM analysis, CVE management, and penetration testing.
  • Familiarity with ARM-based processors, embedded Linux, RTOS environments, and connected device architectures.
  • Experience in medical devices or highly regulated industries (preferred).

More like this

Similar roles

Senior Product Security Engineer, Embedded IoT

Medtronic

Fridley, MN 5 days ago $132,000–$198,000
Embedded Security IoT Security Cryptography Secure Boot HSM PKI BLE Firmware Threat Modeling SBOM Security-by-Design Defense-in-Depth eFOTA ISO 13485 ISO 81001-5-1 Key Management Secure Provisioning
4+ yrs exp

Staff Product Security Engineer

Adobe

New York, NY +2 26 days ago $168,200–$310,100
Threat Modeling Product Security AWS Azure GCP Docker Kubernetes Secure SDLC OWASP Top 10 SANS SAML OAuth OIDC Zero-Trust Burp Suite Kali Linux AI/ML Penetration Testing Vulnerability Remediation
10+ yrs exp

Staff Product Security AI Engineer

PayPal

Austin, TX +2 26 days ago $160,500–$238,700
AI Security SAST DAST SCA WAF Burp Suite Python Java Ruby JavaScript Swift AWS Azure GCP Kubernetes Terraform OAuth 2.0 SAML CI/CD
5+ yrs exp Hybrid

Staff Product Security AI Engineer

PayPal

Austin, TX +2 26 days ago $160,500–$238,700
AI Security SAST DAST SCA WAF Burp Suite Python Java Ruby JavaScript Swift AWS Azure GCP Kubernetes Terraform OAuth 2.0 SAML CI/CD LLM
5+ yrs exp Hybrid

Product Security Engineer

Adobe

New York, NY +2 161 days ago
Python JavaScript React FastAPI Redis Kubernetes Argo Azure OpenAI LLM Prompt Engineering Retrieval-Augmented Generation Vector Databases CI/CD Git Azure GitHub Copilot Cursor Secure SDLC Threat Modeling
4+ yrs exp

Product Security Engineer

Cloudflare, Inc

Austin, TX +1 84 days ago
AI LLM SAST Fuzzing STRIDE Threat Modeling Penetration Testing Bug Bounty JIRA DevOps Agile Product Security Application Security Vulnerability Management
5+ yrs exp Hybrid