Senior Software Engineering Manager

Careers that Change Lives

This position will lead a team of individuals who partner with stakeholders across the organization to identify, document, communicate, and assist with remediating product security vulnerabilities. Organization, documentation, and communication are essential skill sets in this role. The team consists of security professionals who perform various roles in support of vulnerability vigilance:

• Penetration testing
• Threat and Signal Monitoring and Intake
• Communication and Partnership with OU’s and other stakeholders
• Engaging with external parties for information sharing and collaboration
• Assisting with audit readiness when needed

This is a manager role responsible for oversight of individual contributors along with being heavily engaged to guide day to day objectives and priorities of the team. It includes identifying and appropriately escalating security vulnerabilities and findings based on risk, and collaboration to determine recommendations for remediation activity, and tracking and resolving security issues of advanced complexity. This position requires an ability to analyze complex issues, and to identify relevant risk and security policies and gaps. This role works independently with product engineers and requires suitable oral and written communication skills.

Responsibilities may include the following and other duties may be assigned:

• Oversee a team who work independently with product owners to assess vulnerabilities and any remediation controls that exist.
• Oversee and assist with prioritizing penetration test work efforts, including penetration tests performed by the team as well as penetration tests conducted by third parties.
• Oversee third party resourcing supporting vulnerability vigilance including working with procurement to maintain preferred suppliers, managing performance and ensuring ROI.
• Assist with preparing formal written reports to communicate findings, and work with stakeholders to determine remediation activities.
• Continuously anticipate and be audit ready.
• Work with stakeholders to continuously maintain centralized product inventory.
• Possess understanding of SBOM development and maintenance for the purposes of vulnerability monitoring.
• Possess an understanding of common vulnerability scoring (CVSS) and apply appropriately.
• Develop and maintain program metrics/KPIs.
• Proactively engage with third party stakeholders such as researchers, industry peers, regulators, and potentially Medtronic customers.
• Document and communicate recommended security controls and deficiencies.
• Contribute to company standards and policies related to product security risks.
• Develop solutions to problems of unusual complexity, which require a high degree of ingenuity, creativity, and innovativeness. Challenges are frequently unique, and solutions may serve as precedent for future decisions.
• Analyze complex issues and significantly improve, change, or adapt existing methods.
• Market and communicate program vision to project teams, key business stakeholders, and executive leadership.
• Communication planning, information distribution, performance reporting, and administrative closure.
• Provide detailed functional knowledge and maintain insight to current industry best practices and how they can be applied to Medtronic.
• Work with very little direction towards predetermined long-range goals and objectives.
• Establish streamlined processes and structures that accelerate change initiatives; plays a leadership role in change efforts.

Escalate security and privacy issues as appropriate when discovered.

• Bachelor's degree required.
• Minimum of 7 years of relevant experience with 5+ years of managerial experience, or advanced degree with a minimum of 5 years of relevant experience with 5+ years of managerial experience.

• Occasional after-hours availability to accommodate different regional and global partners.
• A solid familiarity of threat modeling, vulnerability scanning tools, and common attack routes is essential.
• Experience working in a regulated environment and/or a formal quality system.
• Medical device engineering experience.
• Strong technical and troubleshooting skills.
• Strong capability to research and evaluate emerging technologies.
• Preference is given to those with relevant product security or engineering experience.
• Strong in interpersonal communication and demonstrate a collaborative work style.
• Comfortable working in an ambiguous environment.
• Innovative thinker; ability to think outside of the current norms and processes.
• Independent self-starter.
• Strong communication and collaboration skills.
• Solid writing and presentation skills.
• Interest in novel applications of technology.

Together, we can change healthcare worldwide. At Medtronic, we push the limits of what technology, therapies, and services can do to help alleviate pain, restore health and extend life. We challenge ourselves and each other to make tomorrow better than yesterday. It is what makes this an exciting and rewarding place to be.

We want to accelerate and advance our ability to create meaningful innovations - but we will only succeed with the right people on our team. Let’s work together to address universal healthcare needs and improve patients’ lives. Help us shape the future.

The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role. (ADA-United States of America)

A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.

This position is eligible for a short-term incentive plan. The base salary range is applicable across the United States, excluding Puerto Rico and specific locations in California. The offered rate complies with federal and local regulations and may vary based on factors such as experience, certification/education, market conditions, and location.