Sr Prin IT Technologist

As an Infrastructure Security Engineer at MiniMed, you will play a crucial role in designing, implementing, and maintaining security controls to protect enterprise systems, applications, and data. You will collaborate closely with IT, engineering, cloud, and risk teams to enhance cybersecurity, strengthen security posture, and ensure compliance with regulatory standards. Your deep technical expertise, problem-solving skills, and ability to influence secure design decisions across the organization will be key to your success in this role. Key Responsibilities: - Support security monitoring, detection engineering, and incident response activities - Investigate security incidents and recommend corrective actions - Manage vulnerability scanning, assessment, prioritization, and remediation efforts - Collaborate with infrastructure and application teams to enhance security through secure configuration and patching - Implement and manage cloud security controls on platforms like AWS, Azure, or GCP - Support secure CI/CD pipelines, application security testing, and secrets management - Work with development teams to integrate security into the SDLC (DevSecOps practices) - Design and support IAM solutions for authentication, authorization, and privileged access management - Implement encryption, key management, and data protection controls - Ensure least privilege access and secure identity lifecycle management - Manage Data Loss Prevention controls - Align security controls with regulatory and compliance requirements (e.g., ISO 27001, NIST, SOC 2, HIPAA, GDPR) - Contribute to security policies, standards, and technical procedures - Provide security guidance and mentorship to junior engineers and cross-functional teams - Communicate risks and recommendations clearly to technical and non-technical stakeholders - Design, implement, and maintain security solutions across on-premises, cloud, and hybrid environments - Evaluate and integrate security technologies like endpoint protection, IAM, network security, and cloud security controls - Develop and maintain security architecture patterns, standards, and technical documentation - Conduct threat modeling and security design reviews for new systems and applications Qualifications Required: - Mastery level knowledge of specialty area and working knowledge of related areas - 12+ years of experience with a bachelors degree, or 8+ years with an advanced degree, or 12+ years with a high school diploma or equivalent Additional Details about MiniMed: At MiniMed, we are dedicated to making every day a better day for people living with diabetes. Our global team of creative innovators shares a passion for finding simple solutions to the challenges faced by individuals with diabetes. With over 40 years of experience, we continue to redefine possibilities in intelligent dosing systems and predictive insights, supporting our customers at every step of their journey. MiniMed values its employees' contributions and offers competitive compensation packages and flexible benefits to support you throughout your career and life. As an Infrastructure Security Engineer at MiniMed, you will play a crucial role in designing, implementing, and maintaining security controls to protect enterprise systems, applications, and data. You will collaborate closely with IT, engineering, cloud, and risk teams to enhance cybersecurity, strengthen security posture, and ensure compliance with regulatory standards. Your deep technical expertise, problem-solving skills, and ability to influence secure design decisions across the organization will be key to your success in this role. Key Responsibilities: - Support security monitoring, detection engineering, and incident response activities - Investigate security incidents and recommend corrective actions - Manage vulnerability scanning, assessment, prioritization, and remediation efforts - Collaborate with infrastructure and application teams to enhance security through secure configuration and patching - Implement and manage cloud security controls on platforms like AWS, Azure, or GCP - Support secure CI/CD pipelines, application security testing, and secrets management - Work with development teams to integrate security into the SDLC (DevSecOps practices) - Design and support IAM solutions for authentication, authorization, and privileged access management - Implement encryption, key management, and data protection controls - Ensure least privilege access and secure identity lifecycle management - Manage Data Loss Prevention controls - Align security controls with regulatory and compliance requirements (e.g., ISO 27001, NIST, SOC 2, HIPAA, GDPR) - Contribute to security policies, standards, and technical procedures - Provide security guidance and mentorship to junior engineers and cross-functional teams - Communicate risks and recommendations clearly to technical and non-technical stakeholders - Design, implement, and maintain