Principal Product Security Engineer

Overview

Lead product security initiatives and provide technical and strategic leadership for cybersecurity across the Neuroscience portfolio of medical device products. This role is based in Hyderabad, India with a Flex work arrangement and requires no travel.

What you'll do

• Lead product security initiatives and provide technical leadership for cybersecurity solution development across medical device platforms.
• Conduct threat modeling, threat analysis, security risk assessments, and CVSS-based risk evaluations to identify and mitigate cybersecurity risks.
• Define, implement, and monitor cybersecurity requirements throughout the Secure Software Development Lifecycle (SSDLC).
• Establish and drive vulnerability management processes, including vulnerability triage, remediation prioritization, tracking, and closure.
• Lead security incident response activities, including investigation, root cause analysis, remediation planning, and stakeholder communication.
• Perform product architecture reviews and security design assessments to improve product security posture and resilience.
• Drive adoption of security automation, DevSecOps practices, and AI/ML-enabled cybersecurity solutions to enhance operational efficiency.
• Ensure compliance with applicable cybersecurity regulations, standards, and medical device guidance while supporting audit and regulatory readiness activities.

What you'll need

• Bachelor's degree OR advanced degree in Computer Science with 12+ years of experience in Product Security, Cybersecurity Engineering, Application Security, Embedded Security, IoT Security, Mobile Security, or Web Application Security.
• Experience in product security engineering, Secure Software Development Lifecycle (SSDLC), threat modeling, security risk assessments, vulnerability management, and incident response.
• Experience with cybersecurity frameworks and standards including NIST, OWASP, MITRE ATT&CK, and Common Vulnerability Scoring System (CVSS).
• Experience performing product architecture reviews, security design assessments, DevSecOps implementation, and secure CI/CD integration.
• Proficiency in Python and experience developing security automation, custom security tooling, or AI/ML-enabled cybersecurity solutions.

Nice to have

• Experience in medical device cybersecurity or other regulated industries.
• Knowledge of IEC 81001-5-1, IEC 62304, FDA Cybersecurity Guidance, Software Bill of Materials (SBOM) management, and open-source governance practices.
• Experience with AI/ML applications for cybersecurity, including Large Language Model (LLM)-enabled security workflows.
• Experience leading cross-functional cybersecurity programs, mentoring engineers, and driving security maturity initiatives.
• CompTIA Security+, Offensive Security Certified Professional (OSCP), Certified Secure Software Lifecycle Professional (CSSLP), ITIL, or similar cybersecurity certifications.

Details

• Location: Hyderabad, India (Nanakramguda).
• Work arrangement: Flex.
• Travel: Not required.
• Eligible for the Medtronic Incentive Plan (MIP), a short-term incentive.