Lead product threat modeling activities and maintain cybersecurity architecture, drive secure development practices, oversee security validation activities, and support global regulatory and post-market cybersecurity requirements for medical device products deployed in clinical environments.
Compensation
Medtronic offers a competitive Salary and flexible Benefits Package
Responsibilities
Lead product threat modeling activities and maintain cybersecurity architecture, attack analyses, and security risk assessments throughout the product lifecycle.
Define security requirements and conduct design reviews for software features, system integrations, and third-party components.
Establish and maintain secure Windows platform configurations, including operating system hardening, application control, secure boot, encryption, and access management.
Integrate cybersecurity requirements into the software development lifecycle through secure coding practices, security testing, vulnerability scanning, and CI/CD security controls.
Manage Software Bill of Materials (SBOM) processes, third-party component inventories, and vulnerability monitoring activities.
Requirements
Bachelor's degree
Nice to have: regulated medical devices under IEC 62304, ISO 14971, ISO 13485, IEC 81001-5-1, or AAMI TIR57 requirements
Lead and own the cybersecurity of the CathWorks platform medical device, ensuring secure development, hardening, verification, and post‑market vulnerability management.
Compensation
Medtronic offers a competitive Salary and flexible Benefits Package
Responsibilities
Lead product threat modeling activities and maintain cybersecurity architecture, attack analyses, and security risk assessments throughout the product lifecycle.
Define security requirements and conduct design reviews for software features, system integrations, and third‑party components.
Establish and maintain secure Windows platform configurations, including operating system hardening, application control, secure boot, encryption, and access management.
Integrate cybersecurity requirements into the software development lifecycle through secure coding practices, security testing, vulnerability scanning, and CI/CD security controls.
Manage Software Bill of Materials (SBOM) processes, third‑party component inventories, and vulnerability monitoring activities.
Seeking a Cybersecurity Engineer to support enterprise application control, endpoint security, and Microsoft Defender technologies. This role will focus on implementing and troubleshooting application whitelisting solutions, managing endpoint security controls, and supporting threat detection and response activities.
Locations (3)
Vienna, Virginia, United States
Winchester, Virginia, United States
Pensacola, Florida, United States
Responsibilities
Implement and troubleshoot application whitelisting solutions
Manage endpoint security controls
Support threat detection and response activities
Investigate alerts and manage policies for Microsoft Defender for Endpoint and Defender Antivirus
Senior Industry Specialist responsible for designing and operating Public Key Infrastructure and code signing environments for Project Leo’s satellite constellation.
Compensation
USA, , - 119,300.00 - 208,900.00 USD annually
Responsibilities
Work with peer teams and customers to design and support PKI systems
Translate business compliance requirements into scalable engineering actions
Manage key generation ceremonies
Collaborate with team members to build a security organization
Communicate vision and project status to management
Requirements
Bachelor's degree in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics or related discipline
Support the delivery of DevSecOps and Secure SDLC programs by conducting research, analyzing client environments, documenting findings, and coordinating activities across governance, identity, application security, platform/infrastructure security, monitoring, resilience, and data protection.
Compensation
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $68,000 to $133,900.
Responsibilities
Support the delivery of DevSecOps and Secure SDLC programs
Assist with the design and implementation of Secure by Design and security engagement intake workflows
Help develop and maintain controls frameworks and control mappings aligned to enterprise policies, standards, and regulatory requirements
Participate in DevSecOps current-state assessments and leading-practices workshops
Support the integration of security into CI/CD and SDLC workflows
Requirements
Bachelor of Arts
Bachelor of Science
Nice to have: Previous consulting or Big 4 experience
Nice to have: 1+ years of experience designing or leading DevSecOps / Secure SDLC programs
Nice to have: Experience translating policy and standards into engineering-ready controls and workflows
Lead mobile DevOps engineering for Android and iOS platforms, designing and maintaining CI/CD pipelines, automating build, test, and release processes, and ensuring high quality and reliability of mobile applications.
Responsibilities
Contribute to requirements elicitation and documentation
Lead design, development, testing, integration, and deployment of enterprise code signing solutions and certificate-based security services.
Responsibilities
Lead the design, development, testing, integration, and deployment of enterprise code signing solutions and certificate-based security services.
Review software designs, architectures, and development activities to ensure alignment with secure software development, PKI, key management, and code signing standards while improving quality and reducing security and operational risk.
Provide technical leadership and domain expertise for cross-functional initiatives involving code signing, digital certificates, cryptographic controls, and software supply chain security.
Drive the adoption and integration of technologies that improve signing automation, cryptographic agility, certificate lifecycle management, and readiness for post-quantum cryptography.
Contribute to the development of scalable and reliable code signing capabilities that support enterprise software delivery objectives.
Requirements
Bachelor's or Master's degree in Computer Science, Information Systems, or a related discipline, or equivalent practical experience.
Lead design, development, testing, integration, and deployment of enterprise code signing solutions and certificate-based security services.
Responsibilities
Lead the design, development, testing, integration, and deployment of enterprise code signing solutions and certificate-based security services.
Review software designs, architectures, and development activities to ensure alignment with secure software development, PKI, key management, and code signing standards while improving quality and reducing security and operational risk.
Provide technical leadership and domain expertise for cross-functional initiatives involving code signing, digital certificates, cryptographic controls, and software supply chain security.
Drive the adoption and integration of technologies that improve signing automation, cryptographic agility, certificate lifecycle management, and readiness for post-quantum cryptography.
Contribute to the development of scalable and reliable code signing capabilities that support enterprise software delivery objectives.
Requirements
Bachelor's or Master's degree in Computer Science, Information Systems, or a related discipline, or equivalent practical experience.
Staff DevOps Engineer with strong cloud and DevSecOps experience, architecting secure CI/CD pipelines, cloud infrastructure, and security for space vehicles and ground segments.
Compensation
The pay range for this role is $232,500.00 - $266,250.00.
Responsibilities
Own software supply chain and build integrity, including SBOMs, provenance, and artifact signing
Build security gates into CI/CD for flight and ground software, including static analysis, fuzzing, and vulnerability scanning
Own the key and signing lifecycle for builds, releases, and firmware, and align it with command authentication and secure update
Write Terraform to secure ground and mission environments in AWS GovCloud, including segmentation, IAM, and boundary controls
Define how development, simulator, hardware-in-the-loop, and flight-representative environments are isolated and promoted