Senior Product Security Engineer (Embedded IoT)

Location: Fridley, Minnesota, United States; office-based role. Candidates must possess unrestricted U.S. work authorization at the time of hire and throughout employment.

Salary: $132,000–$198,000 USD annually, plus eligibility for the hirify.global Incentive Plan.

Company

hirify.global develops healthcare technologies and medical devices for patients worldwide, including neuromodulation and pelvic-health therapies.

What you will do

• Define cybersecurity architecture and security requirements for implantable devices, programmers, controllers, gateways, and connected operating environments.
• Apply Security-by-Design and Defense-in-Depth across hardware, firmware, communication interfaces, authentication, authorization, and data protection.
• Design secure boot, HSM and secure-element integration, encryption, key management, device identity, and secure provisioning.
• Lead threat modeling, security risk analysis, attack-surface analysis, and security-control definition throughout the product lifecycle.
• Define secure BLE, wired, wireless, and device-to-edge communications, including secure firmware update architecture.
• Integrate cybersecurity requirements into product development, manufacturing, verification, risk management, regulatory submissions, and compliance activities.

Requirements

• Bachelor’s degree in computer engineering, electrical engineering, computer science, cybersecurity, or a related field with 4 years of relevant experience, or a master’s degree with 2 years of relevant experience.
• Extensive experience in embedded security, IoT security, firmware, connected devices, or medical-device development.
• Knowledge of cryptography, HSMs or secure elements, PKI, secure boot, provisioning, firmware signing, BLE or network security, and embedded secure development.
• Experience with threat modeling, security risk assessment, SBOMs, Security-by-Design, Defense-in-Depth, and regulated product development.
• For degrees earned outside the United States, the baccalaureate degree must satisfy the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A).
• U.S. work authorization sponsorship is available only for Principal-level roles and above; this Senior-level role requires unrestricted U.S. work authorization.

Nice to have

• Understanding of FDA medical-device cybersecurity guidance, ISO 13485, and ISO 81001-5-1.
• Experience with medical-device cybersecurity standards and regulatory submissions.
• Strong decision-making, documentation, prioritization, communication, and relationship-building skills.

Culture & Benefits

• Health, dental, and vision insurance for eligible regular employees.
• Health Savings Account, Flexible Spending Account, life insurance, and long-term disability coverage.
• 401(k) plan with employer contribution and match, paid time off, and paid holidays.
• Tuition assistance or reimbursement, employee stock purchase plan, employee assistance program, and well-being resources.
• Competitive compensation and incentive plans for regular employees.