Senior Product Security Engineer (Embedded IoT)

Location: Onsite in Fridley, Minnesota, United States of America. Candidates must possess unrestricted U.S. work authorization at the time of hire and throughout employment.

Salary: $132,000–$198,000 per year for U.S. locations excluding Puerto Rico and specific California locations.

Company

hirify.global develops healthcare technologies and medical devices focused on alleviating pain, restoring health, and extending life.

What you will do

• Define cybersecurity architecture and security requirements for implantable devices, programmers, controllers, gateways, and connected operating environments.
• Apply Security-by-Design and Defense-in-Depth across hardware, firmware, interfaces, authentication, authorization, and data protection.
• Design secure boot, HSM and secure-element integration, encryption, key management, device identity, and secure provisioning.
• Lead threat modeling, Security Risk Analysis, attack-surface analysis, security requirements definition, and SBOM maintenance throughout the device lifecycle.
• Define secure BLE, wired and wireless communication, eFOTA and firmware-update architectures, including signing, authentication, anti-rollback, integrity verification, and recovery.
• Integrate cybersecurity requirements into product development, manufacturing, verification, risk management, regulatory submissions, and medical-device compliance activities.

Requirements

• Bachelor’s degree in a related field with 4 years of relevant experience, or a master’s degree in a related field with 2 years of relevant experience. Related fields include Computer Engineering, Electrical Engineering, Computer Science, and Cybersecurity.
• Extensive experience in embedded security, IoT security, firmware, connected devices, or medical-device development.
• For baccalaureate degrees earned outside the United States, a degree satisfying the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.
• Unrestricted U.S. work authorization at the time of hire and for the duration of employment is required.

Nice to have

• Knowledge of cryptography, HSMs, secure elements, PKI, secure boot, provisioning, firmware signing, BLE and network security, and embedded secure development.
• Experience with threat modeling, Security Risk Assessment, SBOM, Security-by-Design, Defense-in-Depth, and regulated product development.
• Understanding of medical-device regulations and standards, including FDA cybersecurity guidance, ISO 13485, and ISO 81001-5-1.
• Strong decision-making, attention to detail, Good Documentation Practices, prioritization, and ability to break work into manageable parts.
• Ability to communicate complex technical information orally and in writing to diverse audiences.
• Ability to develop productive, trusting, and open relationships with varied constituencies.

Culture & Benefits

• Onsite work within a global healthcare technology organization.
• Regular employee benefits include health, dental and vision insurance, HSA, FSA, life insurance, disability coverage, paid time off, and paid holidays.
• Benefits also include a 401(k) plan with employer contribution and match, employee stock purchase plan, employee assistance program, and incentive plans.
• Additional benefits may include tuition assistance or reimbursement, dependent daycare spending account, long-term disability leave, and the Simple Steps global well-being program.
• The position is eligible for the hirify.global Incentive Plan short-term incentive.