Staff Product Security Engineer

Company Description It started with a simple idea: what if surgery could be less invasive and recovery less painful? Nearly 30 years later, that question still fuels everything we do at Intuitive. As a global leader in robotic-assisted surgery and minimally invasive care, our technologies - like the da Vinci surgical system and Ion - have transformed how care is delivered for millions of patients worldwide. We’re a team of engineers, clinicians, and innovators united by one purpose: to make surgery smarter, safer, and more human. Every day, our work helps care teams perform with greater precision and patients recover faster, improving outcomes around the world. The problems we solve demand creativity, rigor, and collaboration. The work is challenging, but deeply meaningful - because every improvement we make has the potential to change a life. If you’re ready to contribute to something bigger than yourself and help transform the future of healthcare, you’ll find your purpose here.

Job Description

This role contributes broadly to the Product Security Team and product development groups by designing, building, and maintaining security solutions and features for current and next-generation surgical robotic systems and manufacturing processes. This position is responsible for improving the overall security posture of products through security analysis, threat modeling, risk analysis, and development of mitigation strategies. The role supports cross-functional teams and collaborates across multiple departments to ensure secure product development and manufacturing standards. This position operates within a dynamic, high-energy team environment and is committed to delivering high product quality across embedded platforms, host-side applications, and networked medical device ecosystems. Essential Job Duties

• Serve as a security subject matter expert for cross-functional teams, reviewing system designs, advising on hardware component selection, and ensuring security requirements are addressed from the ground up.
• Design, develop, and implement security solutions and features for products and manufacturing processes.
• Collaborate with security analysis and implementation teams to validate security requirements and mitigations are correctly implemented.
• Own and drive secure boot implementation across product platforms, including chain-of-trust design, bootloader hardening, and signing infrastructure.
• Own OS security hardening across embedded platforms, covering kernel patching, access control policies, filesystem protections, and reducing attack surface at the system level.
• Apply network security principles to medical device architectures, including secure communication protocols, network segmentation, and interface hardening.
• Design and implement security features across embedded platforms including Yocto Linux and QNX, adapting to additional environments based on product and program requirements.
• Develop and present security architectures and mitigation strategies to both technical and non-technical stakeholders.
• Collaborate with cross-functional teams, including product, manufacturing, legal, regulatory, quality assurance, and engineering to address security concerns and compliance.
• Provide technical leadership on security projects, coordinating activities across departments and vendors from concept through completion.
• Support incident response, vulnerability management, and cyber threat intelligence functions as needed.
• Continuously improve security processes, guidance documentation, and operational procedures.

Qualifications

Required Education, Skills & Experience

• Minimum 12 years of related experience in cybersecurity, product security engineering or related field with a Bachelor's degree; or 8 years of experience and a Master's degree; or a PhD with 5 years of experience; or equivalent experience
• Deep understanding of embedded security, including secure boot, OS hardening, kernel patching, and platform trust architectures.
• Strong proficiency in Python, shell scripting, and C/C++ for security feature development and automation.
• Hands-on experience with embedded Linux build systems, particularly Yocto Project, and real-time operating systems such as QNX, including system configuration, layer development, and security hardening within those environments.
• Solid understanding of network security concepts, including protocols, segmentation, interface hardening, and threat modeling for networked devices.
• Strong knowledge of cybersecurity fundamentals: vulnerability management, threat modeling, risk analysis, and mitigation techniques.
• Ability to present complex security topics clearly to engineering, leadership, and regulatory audiences.
• Strong analytical and problem-solving skills with the ability to make sound decisions under competing priorities and incomplete data.
• Familiarity with cloud security technologies such as AWS and security compliance standards like IEC 62443, NIST, and FDA cybersecurity guidance is a plus.

Additional Information

Due to the nature of our business and the role, please note that Intuitive and/or your customer(s) may require that you show current proof of vaccination against certain diseases including COVID-19. Details can vary by role. Intuitive is an Equal Opportunity Employer. We provide equal employment opportunities to all qualified applicants and employees, and prohibit discrimination and harassment of any type, without regard to race, sex, pregnancy, sexual orientation, gender identity, national origin, color, age, religion, protected veteran or disability status, genetic information or any other status protected under federal, state, or local applicable laws. Mandatory Notices U.S. Export Controls Disclaimer: In accordance with the U.S. Export Administration Regulations (15 CFR §743.13(b)), some roles at Intuitive Surgical may be subject to U.S. export controls for prospective employees who are nationals from countries currently on embargo or sanctions status. Certain information you provide as part of the application will be used for purposes of determining whether Intuitive Surgical will need to (i) obtain an export license from the U.S. Government on your behalf (note: the government’s licensing process can take 3 to 6+ months) or (ii) implement a Technology Control Plan (“TCP”) (note: typically adds 2 weeks to the hiring process). For any Intuitive role subject to export controls, final offers are contingent upon obtaining an approved export license and/or an executed TCP prior to the prospective employee’s start date, which may or may not be flexible, and within a timeframe that does not unreasonably impede the hiring need. If applicable, candidates will be notified and instructed on any requirements for these purposes. We will consider for employment qualified applicants with arrest and conviction records in accordance with fair chance laws. Preference will be given to qualified candidates who do not reside, or plan to reside, in Alabama, Arkansas, Delaware, Florida, Indiana, Iowa, Louisiana, Maryland, Mississippi, Missouri, Oklahoma, Pennsylvania, South Carolina, or Tennessee. This position may be filled at a different job level than listed here depending on

business need and/or on the selected candidate’s experience, knowledge and skills.

Compensation will be based primarily on the job level at which the role is filled and the

candidate’s qualifications, consistent with applicable law.

Accommodation & Accessibility Notice:

Intuitive is committed to providing reasonable accommodations to qualified individuals with disabilities. If you require assistance or an accommodation during any part of the application or interview process, please contact People Services at HRHelpNow@intusurg.com. We provide market-competitive compensation packages, inclusive of base pay, incentives, benefits, and equity. It would not be typical for someone to be hired at the top end of range for the role, as actual pay will be determined based on several factors, including experience, skills, and qualifications. The target compensation ranges are listed.