Cloud Product Cybersecurity Engineer

remote type On-Site

locations Northridge, California, United States of America

time type Full time

At Mini Med, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world.

The Cloud Product Cybersecurity Engineer is responsible for integrating cybersecurity into the design, development, manufacturing, and lifecycle management of Minimed’s therapy management systems and connected healthcare technologies. This role partners with R&D, software engineering, regulatory affairs, quality assurance, and enterprise security teams to ensure products are designed and maintained with strong security controls and comply with applicable FDA cybersecurity guidance, ISO 27001, NIST, and other cybersecurity frameworks.

The engineer will support secure product architecture, threat modeling, vulnerability management, and secure software development practices while ensuring medical device cybersecurity risks are effectively identified, assessed, and mitigated.

Responsibilities may include the following and other duties may be assigned.

• Define and implement secure design principles for cloud-based applications.
• Conduct code reviews for new products and product updates.
• Partner with engineering teams to integrate security controls into Dev Ops / Dev Sec Ops  pipelines.
• Embed cybersecurity requirements into the application product lifecycle (SDLC).

• Configure and maintain Cloud Monitoring and CNAPP platforms on cloud products.
• Define and enforce secure baseline standards for Machine Images or templates
• Ensure all images include hardened OS configurations, EDR agents, logging, and telemetry configurations aligned with SOC monitoring requirements
• Establish secure container base image standards (minimal OS, hardened images)
• Enforce runtime security controls across Kubernetes/ECS environments

• Conduct threat modeling exercises for cloud and application architectures.
• Perform cybersecurity risk assessments aligned with recognized risk management processes.
• Software Composition Analysis to determine risk of dependencies
• Identify attack surfaces including:
  Mobile or cloud applications and Network integrations
• Develop mitigation strategies and security control recommendations.

• Coordinate product vulnerability scanning and penetration testing.
• Manage vulnerabilities in accordance with coordinated vulnerability disclosure (CVD) processes.
• Assess vulnerability impact on deployed medical devices.
• Work with engineering teams to develop secure patches and remediation plans.
• Support vulnerability intelligence monitoring (e.g., CVE, NVD, IC-CERT advisories).

• Conduct static and dynamic code analysis
• Support penetration testing and red-team activities
• Validate device security controls including:
  Authentication mechanisms, encryption implementations, network protections, container build time and runtime scans.
• Ensure security controls are validated during verification and validation (V&V) processes.

• Support product, application and cloud security monitoring capabilities.
• Assist in investigating cybersecurity incidents.
• Participate in post-market surveillance and vulnerability response processes.
• Collaborate with enterprise SOC teams when product threats intersect with corporate infrastructure.

• Work closely with:
• Product Engineering
• Privacy and Compliance Teams
• Security Operations
• Cloud and Infrastructure Security teams

The role ensures enterprise security capabilities are leveraged to protect products, while maintaining separation between enterprise IT security and product security requirements.

Requires a bachelor’s degree and minimum of 7 years of relevant experience, or advanced degree with a minimum of 5 years relevant experience.

• Degree in Computer Science, Cybersecurity, Electrical…