> Markdown version of [/jobs/ext/4388284-sr-product-security-engineer-embedded-iot](https://www.wearedevelopers.com/jobs/ext/4388284-sr-product-security-engineer-embedded-iot). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Product Security Engineer - Embedded IoT

- **Company:** Medtronic Inc.
- **Location:** Fridley, MN, United States
- **Experience:** Expert
- **Salary:** $132,000 - $198,000
- **Contract:** Temporary contract
- **Skills:** User Authentication, Cyber Security, Computer Engineering, Firmware, Information Systems Security Architecture Professional, Key Management, Network Security, Public Key Infrastructure, Secure Coding, EndPointSecurity, Software Security, Information Technology, U-Boot, IoT Security
- **Published:** October 21, 2026
- **Apply:** https://www.dice.com/job-detail/57693bd9-7595-4b80-9aa1-52fc39c00fd1

## About the Role

* Bachelor's degree in related field with 4 years of relevant experience OR masters degree in related field with 2 years of relevant experience (Computer Engineering, Electrical Engineering, Computer Science, Cybersecurity)
 * Extensive experience in embedded security, IoT security, firmware, connected devices, or medical-device development., * Strong knowledge of cryptography, HSM/secure elements, PKI, secure boot, provisioning, firmware signing, BLE/network security, and embedded secure development.
 * Experience with threat modeling, Security Risk Assessment, SBOM, Security-by-Design, Defense-in-Depth, and regulated product development.
 * Understanding of medical device regulations and standards (e.g., FDA pre- and post-market guidance on cybersecurity for medical device manufacturers, ISO 13485, ISO 81001-5-1).
 * Strong decision-making capabilities, weighing relative costs and benefits to identify the most appropriate solution.
 * High attention to detail with a focus on Good Documentation Practices (GDP).
 * Ability to communicate complex, technical information in a creative and engaging way to diverse audiences, orally and in writing.
 * Excellent prioritization skills, with an aptitude for breaking down work into manageable parts and assessing priority and time required.
 * Demonstrated ability to develop and grow productive, trusting, and open relationships with a wide variety of constituencies.

For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. 214.2(h)(4)(iii)(A) is required.

## Description

The Senior Product Security Engineer - Embedded IoT is responsible for cybersecurity architecture and Security-by-Design for implantable and connected medical-device platforms. The role focuses on embedded systems, device connectivity, cryptography, secure provisioning, firmware updates, and protection of device-to-device and device-to-edge communication., Embedded & IoT Security Architecture

 * Define security architecture and requirements for implantable devices, programmers/controllers, gateways, and connected operating environments.
 * Apply Security-by-Design and Defense-in-Depth across hardware, firmware, communication interfaces, authentication, authorization, and data protection.
 * Design secure boot, HSM/secure-element integration, encryption, key management, device identity, and secure provisioning.

Threat Modeling & Security Risk

 * Lead threat modeling, Security Risk Analysis, attack-surface analysis, and security requirements definition throughout the device lifecycle.
 * Translate identified threats into architectural controls, product security requirements, verification activities, and risk-control evidence.
 * Maintain SBOM and software/component security requirements for embedded platforms.

Connected Device Security

 * Define secure communication architecture for BLE, wired/wireless interfaces, programmers, gateways, and remote-monitoring connectivity.
 * Support secure eFOTA/firmware update architecture including signing, authentication, anti-rollback, integrity verification, and recovery.
 * Define manufacturing security requirements for device identity, cryptographic key/certificate injection, provisioning, and lifecycle management.

Compliance & Product Development

 * Integrate cybersecurity requirements into systems, software, hardware, manufacturing, verification, and risk-management processes.
 * Support regulatory submissions and compliance with medical-device cybersecurity standards and guidance.