> Markdown version of [/jobs/ext/2862244-principal-security-privacy-engineer](https://www.wearedevelopers.com/jobs/ext/2862244-principal-security-privacy-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security & Privacy Engineer - **Company:** Medtronic Inc. - **Location:** Los Angeles County, CA, United States - **Experience:** Experienced - **Salary:** $160,800.0 - $241,200.0 - **Contract:** Temporary contract - **Skills:** Cyber Security, Privacy Controls, Integration Frameworks - **Published:** September 12, 2026 - **Apply:** https://www.dice.com/job-detail/eaa198e3-f58a-42b0-856e-6dd01789e11a ## About the Role * Bachelor's degree with 7 years of relevant experience OR a Master's degree with 5 years of relevant experience OR a PhD with 3 years of relevant experience * Extensive experience with Privacy by Design principles and integrating privacy into product development lifecycles., * Privacy and security incident management experience * Cybersecurity / Information Security and/or IT background, including understanding of data protection practices, risk management processes, cybersecurity principles, and incident response methodologies. * Expertise in global privacy laws including HIPAA and GDPR. * Experience in the healthcare industry or another heavily regulated industry. * CIPP, CHPC, or similar certification, or proven experience and/or formal education in data privacy and compliance. * Understanding of medical device regulations and standards (e.g., FDA pre- and post-market guidance on cybersecurity for medical device manufacturers, ISO 13485, ISO 81001-5-1). For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. 214.2(h)(4)(iii)(A) is required. ## Description As the Principal Security & Privacy Engineer, you will serve as the technical leader responsible for advancing Privacy by Design practices across a portfolio of connected medical devices and supporting technology systems. This role provides hands-on leadership for privacy risk management, regulatory compliance activities, privacy assessments, incident response, and cross-functional collaboration to ensure privacy requirements are embedded throughout the product lifecycle., * Own and continuously mature the Privacy by Design framework, integrating privacy requirements into product development processes, governance activities, and lifecycle management practices. * Lead cross-functional teams through Privacy by Design activities, identifying privacy risks and defining appropriate technical and procedural controls for products, systems, and third-party integrations. * Conduct data privacy assessments, including Data Protection Impact Assessments (DPIAs), and drive mitigation planning and implementation. * Develop and maintain privacy documentation, data maps, compliance evidence, policies, procedures, and regulatory submission deliverables. * Lead privacy investigations and corrective actions, coordinating remediation activities and supporting privacy incident response processes. * Partner with product security engineering teams to align privacy requirements with threat assessments, security risk management activities, and product assurance objectives. * Provide privacy consultation and subject matter expertise to engineering, legal, regulatory, and business stakeholders on product-specific privacy matters. * Mentor privacy and security professionals and contribute to privacy awareness, training, metrics, and continuous improvement initiatives. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Building the platform for providing ML predictions based on real-time player activity](https://www.wearedevelopers.com/videos/944-building-the-platform-for-providing-ml-predictions-based-on-real-time-player-activity) - [A Journey from Internal Tools to Public SDK](https://www.wearedevelopers.com/videos/1013-a-journey-from-internal-tools-to-public-sdk) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)