Senior Product Security Engineer – Software (Medical Devices)

Location: Mounds View, Minnesota, United States; on-site work 4 days per week with less than 10% travel.

Salary: USD 132,000–198,000 annually, excluding Puerto Rico and specific California locations.

Company

hirify.global develops medical technologies, services, and solutions for healthcare, including energy-based therapeutic medical devices for renal denervation.

What you will do

• Integrate product security into the software product development lifecycle and collaborate with Agile scrum teams.
• Conduct threat modeling, security risk evaluations, vulnerability assessments, vulnerability scanning, penetration testing, and code reviews.
• Contribute to secure medical device architectures and implement secure boot, secure communications, data protection, secure updates, secure integration, and access controls.
• Maintain and implement security standards, policies, procedures, documentation, design patterns, inventories, architectures, and incident response plans.
• Lead and support security incident response, including mitigation, resolution, and communication with stakeholders and customers when needed.
• Support security compliance for medical device and health software products, including NIST, IEC 60601-4-5, and IEC 81001-5-1.

Requirements

• Previous experience as a security engineer for software products.
• Experience in cybersecurity, threat modeling, security incident management, and proactive security strategies.
• Hands-on experience developing, debugging, and troubleshooting software issues.
• Experience working in Agile software development teams.
• Bachelor’s degree in computer engineering, electrical engineering, computer science, engineering, or a related technical discipline plus at least 4 years of technical work experience, or an advanced degree in one of these disciplines plus 2 years of technical work experience.
• Unrestricted U.S. work authorization is required at the time of hire and throughout employment for roles below Principal level.

Nice to have

• At least 2 years of security experience in a regulated industry.
• Security certifications such as GSEC, CISSP, CISA, GCIH, or CC.
• Bachelor’s degree in a related engineering or cybersecurity field from an accredited institution.
• Proficiency in secure coding practices and methodologies.
• Ability to adapt to the evolving cybersecurity landscape and contribute to proactive security strategies.
• Ability to identify challenges and propose effective solutions.
• Familiarity with evolving medical device regulations and relevant security standards.

Culture & Benefits

• Inclusive environment that values different cultures, genders, and perspectives.
• Regular employees may receive health, dental, and vision insurance, HSA, FSA, life insurance, disability coverage, paid time off, and paid holidays.
• Benefits include tuition assistance or reimbursement, employee stock purchase plan, employee assistance program, retirement plans, and 401(k) employer contribution and match.
• Eligible employees may participate in the hirify.global Incentive Plan and other incentive programs.
• Work emphasizes in-person collaboration, professional growth, and cross-functional development of healthcare technology.