Senior Product Security Engineer - Cloud Digital Solutions

Location: Fridley, Minnesota, United States of America; office role. Candidates below the Principal level must have unrestricted U.S. work authorization at hire and throughout employment. H-1B, TN, J, and other U.S. sponsorship is offered only for Principal-level roles and above.

Salary: $132,000–$198,000 annual base salary for U.S. locations excluding Puerto Rico and specific California locations. The position is also eligible for the hirify.global Incentive Plan.

Company

hirify.global develops healthcare technologies and medical devices and operates across more than 150 countries, serving patients through therapies including neuromodulation and pelvic health solutions.

What you will do

• Define Security-by-Design and Defense-in-Depth architecture for digital health platforms, cloud-native services, web and mobile applications, APIs, and remote-monitoring solutions.
• Establish requirements for identity, authentication, authorization, encryption, secrets, data protection, network segmentation, logging, and service-to-service communication.
• Lead threat modeling, Security Risk Analysis, attack-surface analysis, security requirements, SBOM and component-security activities.
• Design secure provisioning, certificate, credential, secrets-management, eFOTA, telemetry, device-service authentication, and connected medical-device integrations.
• Define cloud security monitoring, vulnerability management, configuration security, and DevSecOps requirements.
• Lead security assurance, certification and recertification readiness, control implementation, evidence collection, remediation, audit support, and regulatory alignment.

Requirements

• Bachelor’s degree in Computer Engineering, Electrical Engineering, Computer Science, Cybersecurity, or a related field plus 4 years of relevant experience, or a master’s degree in a related field plus 2 years of relevant experience.
• Extensive experience in cloud security, application security, digital platforms, cybersecurity architecture, or regulated software development.
• For baccalaureate degrees earned outside the United States, the degree must satisfy 8 C.F.R. § 214.2(h)(4)(iii)(A).
• Unrestricted U.S. work authorization is required at the time of hire and for the duration of employment for roles below Principal level.

Nice to have

• Knowledge of cloud-native security, IAM, APIs, PKI, encryption, secrets management, containers, DevSecOps, logging and monitoring, and data protection.
• Experience with threat modeling, SRA, SBOM/SCA, Security-by-Design, Defense-in-Depth, and regulated medical-device environments.
• Understanding of medical-device regulations and standards, including FDA cybersecurity guidance, ISO 13485, ISO 81001-5-1, ISO 27001, SOC 2, HIPAA, and HITRUST.
• Strong decision-making, prioritization, documentation, and attention-to-detail skills, including Good Documentation Practices.
• Ability to communicate complex technical information creatively and effectively to diverse audiences and build productive relationships across constituencies.

Culture & Benefits

• Full-time employment in an office role supporting healthcare technology and medical-device cybersecurity.
• Benefits for eligible regular employees include health, dental, and vision insurance; HSA and healthcare FSA; life insurance; disability coverage; and dependent-care spending accounts.
• Additional benefits include tuition assistance, paid time off, paid holidays, 401(k) with employer contribution and match, incentive plans, employee stock purchase plan, employee assistance, and retirement-plan options.
• Reasonable accommodations are available for qualified individuals with disabilities.

Hiring process

• The anticipated application window closes on 4 November 2026.
• Applications must be submitted through official hirify.global channels; legitimate recruiting communications use approved hirify.global platforms and official @hirify.global.com addresses.