Medtronic
At Medtronic, we value what makes you unique. Be part of a company that thinks differently to solve problems, make progress, and deliver meaningful innovations.
Our Purpose
At Medtronic Patient Care Systems (PCS), we power the digital heartbeat behind life-saving cardiac therapies. We build the connected ecosystem that enables clinicians to monitor, manage, and protect millions of patients living with implantable cardiac devices around the world.
From secure device connectivity and real-time data platforms to intelligent clinical tools and patient-facing experiences, PCS transforms complex cardiac data into clarity — helping physicians make faster decisions, improving outcomes, and giving patients greater confidence in their care.
Our work ensures that life-saving therapies are not only delivered securely, safely and reliably, but continuously improved through innovation, insight, and global scale.
If you want to build technology that truly matters — join us. Together, we are shaping the future of connected cardiac care and changing lives every single day
Come for a job, stay for a career!
As a Senior Product Security Engineer, Mobile Applications, you will help software teams build secure mobile applications and connected digital health solutions that support life-changing medical technologies. You’ll work closely with software engineers, architects, quality, regulatory, and clinical partners to embed security across the software development lifecycle.
This role is ideal for someone who enjoys solving complex technical problems, partnering with development teams, and translating security requirements into practical, risk-based solutions. You’ll help ensure products are secure by design while balancing patient safety, usability, regulatory expectations, and engineering efficiency.
In this role, no two days are the same. You may be:
Leading threat models and security risk assessments for new mobile applicationsReviewing application architecture and recommending security controlsHelping teams understand results from security testing tools such as SAST, SCA, IAST, and DASTSupporting vulnerability investigations, remediation planning, and postmarket security activitiesPreparing cybersecurity documentation for regulatory submissionsPartnering with teams to improve security processes, tooling, and automationYou will support multiple software development projects at once and serve as a trusted security partner throughout the product lifecycle, from concept through release and post market support.
Application and Product Security
Partner with engineering teams developing mobile apps, Software as a Medical Device (SaMD), APIs, and cloud-connected software eco-systems.Perform secure design and architecture reviewsAdvise on authentication, authorization, secure communications, API security, and application resilienceGuide teams on mobile security controls such as secure storage, certificate validation, runtime protections, and app hardeningTranslate technical findings into practical recommendations developers can act onRisk Assessment and Lifecycle Security
Conduct threat modelling, cybersecurity risk assessments, and vulnerability analysisDefine security requirements and support secure design decisionsReview penetration testing results and support remediation effortsHelp ensure compliance with FDA guidance, IEC 81001-5-1, and evolving global cybersecurity standards and regulationsRegulatory and Compliance Support
Develop cybersecurity documentation for regulatory submissions and audits, including:Threat modelsSecurity risk assessmentsSecurity test plans and reportsSoftware Bills of Materials (SBOMs)Security architecture documentationVulnerability assessments and dispositionsSupport responses to regulatory questions, customer security assessments, and inspectionsIncident Response and Continuous Improvement
Support Product Security Incident Response (PSIRT), Coordinated Vulnerability Disclosure (CVD), and post market vulnerability investigationsAssess exploitability, product impact, and remediation optionsImprove security workflows through automation, tooling, and process enhancementsShare knowledge and help teams strengthen secure software development practices
