{"id":1901828,"url":"https://alion.io/job/medtronic-senior-product-security-engineer-2","title":"Senior Product Security Engineer","company":{"id":638,"name":"Medtronic","domain":"medtronic.com","url":"https://alion.io/company/medtronic","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":96,"open_postings":299,"ghost_share":0.017,"stale_share":0.254,"repost_share":0.11,"time_to_fill_p50_days":11,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CVSS","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wireshark","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"MQTT","optional":true},{"name":"NIST 800-53","optional":true},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-10-05T11:26:19Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-20T00:24:00Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Careers that change lives start here. Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first - developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact.\nA Day in the Life\nThe Product Security function within Research & Development is responsible for integrating cybersecurity throughout the product lifecycle for medical devices, connected healthcare solutions, software applications, embedded products, and cloud-connected healthcare systems. The team partners closely with R&D, Systems Engineering, Quality, Regulatory, and Product teams to support secure product development, cybersecurity risk management, vulnerability management, regulatory compliance, and post-market cybersecurity activities across Class I, Class II, and Class III medical devices.This position is based in Hyderabad, India and follows a Flex work arrangement. No travel is required.\nAs a Senior Product Security Engineer, you will drive product security activities across the product lifecycle, including security risk assessments, threat modeling, security architecture reviews, penetration testing, vulnerability management, and compliance with medical device cybersecurity regulations and standards. This role supports medical devices, connected care platforms, software applications, and cloud-connected healthcare systems while collaborating with cross-functional teams to integrate cybersecurity into product development processes.\nPrimary Responsibilities\nPerform security risk assessments throughout the product development lifecycle.\nConduct threat modeling activities using methodologies such as STRIDE, Attack Trees, MITRE ATT&CK, CVSS, and similar frameworks.\nIdentify product security requirements and support implementation of appropriate security controls.\nReview system, software, cloud, and network architectures from a security perspective.\nCollaborate with development teams to design secure products and mitigate identified risks.\nPlan and execute security testing activities including vulnerability assessments, penetration testing, secure code reviews, security regression testing, protocol security testing, and network security testing.\nAnalyze, prioritize, and track vulnerabilities through remediation and verification activities while supporting coordinated vulnerability disclosure and post-market cybersecurity processes.\nIntegrate cybersecurity activities into product development processes, support security design reviews, security architecture assessments, security impact assessments, security KPIs, security metrics, automation initiatives, and DevSecOps practices.\nRequired Qualifications\nBachelor's degree OR Master's degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or Electronics & Communication Engineering with 8+ years of experience in Product Security, Application Security, Cybersecurity Engineering, or Medical Device Security.\nExperience working with connected products, embedded systems, desktop applications, cloud services, Internet of Things (IoT) platforms, or healthcare technology products.\nExperience in security risk assessments, threat modeling, security architecture reviews, security requirements engineering, vulnerability assessments, penetration testing, secure code reviews, network security testing, and web/API security testing.\nExperience with security tools including Burp Suite, OWASP ZAP, Nessus, Nmap, Wireshark, Metasploit, or similar application and infrastructure security tools.\nExperience developing scripts and automation tools using Python and supporting Secure Software Development Lifecycle (SSDLC), DevSecOps, vulnerability management, and security automation activities.\nPreferred Qualifications\nExperience securing Class I, Class II, and Class III medical devices, connected healthcare solutions, Software as a Medical Device (SaMD), or cloud-connected healthcare systems.\nKnowledge of FDA Cybersecurity Guidance, IEC 81001-5-1, AAMI TIR57, AAMI TIR97, IEC 62304, ISO 14971, and NIST 800-53.\nExperience with Software Bill of Materials (SBOM), dependency analysis, coordinated vulnerability disclosure, and post-market cybersecurity activities.\nKnowledge of cloud security in Microsoft Azure and Amazon Web Services (AWS) environments.\nKnowledge of authentication and authorization technologies, cryptography fundamentals, and secure communication protocols including TLS, HTTPS, and MQTT.\nPhysical Job Requirements\nThe above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.\nRecruitment Fraud Alert\nWe are aware of phishing scams targeting job seekers. Please keep the following in mind:\nApply only through official Medtronic channels. All legitimate Medtronic recruiting communications come from approved Medtronic platforms and official @medtronic.com email addresses.\nMedtronic will never ask for payment or sensitive personal information (such as bank account or Social Security details) during early stages of the hiring process. Any such requests are not legitimate.\nIf you receive a suspicious message claiming to be from Medtronic, do not respond, click links, or open attachments.\nIf you have any questions, concerns regarding the authenticity of a communication alleged to have been made by or on behalf of Medtronic, please contact us immediately at .\nBenefits & Compensation\nMedtronic offers a competitive Salary and flexible Benefits Package\nA commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create.We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.\nThis position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).","description_format":"text","description_chars":6241,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Surgical Instruments & Devices","Information Security","Orthopedic & Spine Implants","Diabetes Devices"],"lifecycle":[{"event":"open","at":"2026-10-05T11:26:19Z"}],"visa":[],"liveness":{"score":37,"band":"fade","label":"Fading","p_open":1,"p_active":0.678,"p_room":0.55,"age_days":13,"expected_fill_days":11,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/medtronic-senior-product-security-engineer-2","json_url":"https://alion.io/job/medtronic-senior-product-security-engineer-2.json","meta":{"generated_at":"2026-10-20T02:01:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2352,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":638},"rest":"https://alion.io/mcp/rest/get_company?id=638"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmedtronic-senior-product-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmedtronic-senior-product-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmedtronic-senior-product-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/medtronic-senior-product-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmedtronic-senior-product-security-engineer-2"}]}