Job Description
Travel
Yes, < 25 % of the TimeCareers that Change LivesSummary of Position:
The Product Security Engineer position will provide Product Security support and leadership within the ENT OU products and solutions. Specifically, the candidate will support and drive the integration of Information Security in the ENT programs, to ensure that patient safety and information security are never compromised. The candidate will work cross-functionally with the R&D teams to ensure that:
• ENT solutions are architected and designed for the highest level of security,
• Relevant security risks are identified and evaluated
• Engineering decisions are made to support security.
• Solutions released comply to the latest regulatory or standard requirements
The candidate will execute the development and testing of security requirements, security processes & procedures and project / Product Security artifacts as part of the Product Security Engineering team. The candidate will be responsible to develop, maintain and review project security management deliverables for regulatory bodies to comply with standards/guidance documents, and communicate with regulatory bodies as required by the program.
The candidate will be part of a cross-functional team of security experts within the Medtronic organization to create, improve and implement security design/ testing best practices and will be the interface with the Medtronic security council.
This position has the responsibility and authority to apply extensive technical expertise towards software solutions of complex technical problems and provides solutions that require the regular use of ingenuity and creativity. Work is performed without appreciable direction and with considerable latitude in determining technical objectives of the assignment.
Position Responsibilities:
The Product Security Engineer is responsible for providing leadership in the development of secured products used in the medical field. Specific tasks include:
• Execute Product Security-related activities throughout the lifecycle of ENT solutions. This includes but not limited to:
o security requirements definition, flow down and verification, security design architecture at system and implementation through products,
o risk management activities to identify areas where a development project must implement specific security controls and recommendations for system-wide security enhancements, risk assessment and mitigation plans for market –released products.
• Assist in the development of security-related abuse cases to identify security risks.
• Identify options for mitigating security-related risks, and assist the Systems Engineering team in evaluating these options.
• Support security activities in communications with regulatory bodies.
• Contribute to Medtronic’s understanding of current industry best practices and how they can be applied to ENT Products.
• Applies advanced technical principles, theories and concepts. Support across the ENT organization the development of processes, best practices leading to improve ENT OU’s position as it relates to Information and Product security.
• Works under consultative direction toward long range goals and objectives.
• Develops advanced technical ideas and guides their development into final product.
• Lead / Coordinate / Execute/ Assist activities to sustain/ develop organic or inorganic security testing capabilities in alignment with Medtronic testing strategies.
• Maintains a high level of technical knowledge on security.
• Automating the running of the vulnerability scans, the report creation,
• Creating, managing/maintaining a database of vulnerabilities by product line mapping to CVE
• Performs duties in compliance with environmental, health and safety related site rules, policies or governmental regulations.
• Champion consistent implementation of the Quality System across projects
About Medtronic
Together, we can change healthcare worldwide. At Medtronic, we push the limits of what technology, therapies and services can do to help alleviate pain, restore health and extend life. We challenge ourselves and each other to make tomorrow better than yesterday. It is what makes this an exciting and rewarding place to be.
We want to accelerate and advance our ability to create meaningful innovations - but we will only succeed with the right people on our team. Let’s work together to address universal healthcare needs and improve patients’ lives. Help us shape the future.
Physical Job Requirements
The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer, and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role. (ADA-United States of America). #MEICNSJOBS