Medtronic
Location
Secunderabad | India
Job description
As a Principal Product Security Engineer at Medtronic, you will play a pivotal role in safeguarding our medical devices and healthcare solutions. You will be a key member of the Product Security responsible for ensuring the security and privacy of our products. Your expertise will guide us in delivering safe and secure healthcare solutions that meet the highest standards.
Job Responsibilities:
Desired Technical Skills/Experience:
Security Technologies: Sound knowledge of security technologies and techniques including Cryptography, Algorithms, PKI (Public Key Infrastructure), OAuth, 2-factor authentication, and embedded authentication.
Hands on experience in security risk management, aligned with overall product risk management process.
Knowledge on Standards and processes ISO 14791, ANSI/AAMI, TIR 57, IEC 62304 and ISO/IEC 80001-0, FDA, EU MDR and other regulatory guidelines
Experience in writing the SOP,
Review security implementation plan, security summary and Security risk summary.
Strong System Engineering knowledge and Threat Modeling
Security vulnerability assessment, CVSS scoring pre and post market releases.
Security by Design: Familiarity with security by design principles and architecture-level security concepts.
Penetration Testing: Hands-on experience with penetration testing methodologies, tools, security analysis, audits, and reviews.
Information System Security: Knowledge of information system architecture and security controls, including firewall and border router configurations, wireless architectures, and specialized appliances.
Security Threats: Understanding of current and emerging security threats and techniques for exploiting vulnerabilities, as well as exposure to international privacy requirements and cross-industry trends.
Agile Methodologies: Experience with SAFe/Agile methodologies for software development.
Desired Industry Exposure: Exposure to the healthcare IT or medical device industry is a plus.
Cloud Security (Optional): Strong understanding of AWS and Azure environments and their security considerations.
Teamwork: Demonstrated skill working as part of a team, collaborating, and supporting peers in a fast-paced environment.
Motivation: Self-motivated with the drive to solve challenging problems and motivate others to higher levels of performance and engagement.
Continuous Learning: A strong desire and aptitude for continuous learning and staying updated on new and emerging technologies.
Teamwork: Demonstrated skill working as part of a team, collaborating, and supporting peers in a fast-paced environment.
Motivation: Self-motivated with the drive to solve challenging problems and motivate others to higher levels of performance and engagement.
Continuous Learning: A strong desire and aptitude for continuous learning and staying updated on new and emerging technologies.
Nice to Have
Experience with vulnerability or incident management activities
Security Certifications (ie CISSP, CEH, CISA, CISM, Security+, GSEC, OSCP, etc)
Participation in incident management and systems troubleshooting.
Familiarity of embedded environments, vulnerability scanning tools, and common attack routes
Capability to research and evaluate emerging technologies
Knowledge of the medical device industry
Security certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) is a plus.
Leadership Abilities:
Strategic Planning: Demonstrated ability to strategize and execute security programs.
Global Product Releases: Proven experience with global product releases throughout the product introduction cycle.
Communication: Clear communicator with strong written and oral communication skills.
Problem Solving: A self-starter and problem solver with results-oriented and multitasking capabilities.
Mentoring: Ability to mentor and coach future Product Security technical leaders and professionals.
Qualifications and skills
Education: Bachelors degree in Computer Science or a related field, or equivalent demonstrated experience and knowledge.
Total 15 Years of experience and a minimum of 10 years of technical experience working with cybersecurity architecture, product security engineering or a related role.
Proficiency in security testing tools.
Strong knowledge of security best practices, standards, and regulations in Medical Devices
Hands-on experience with secure coding practices and code reviews.
Familiarity with encryption, authentication, access control, and incident response.
Excellent communication skills and the ability to collaborate with cross-functional teams
Job tags
Salary