Base Salary
$197k - $295k/yr
Responsibilities
- Define and evolve security architecture across the insulin pump, CGM integrations, iOS and Android apps, and cloud services.
- Design and govern PKI, including certificate hierarchies, device and service identity, provisioning, rotation, revocation, and secure key storage.
- Define cryptographic protections for therapy commands and health data, including authenticated sessions, signing, and key lifecycle management.
- Own identity architecture for patients, mobile apps, pumps, and cloud services, including authentication, authorization, and least-privilege access.
- Lead BLE security design covering pairing, bonding, device authentication, encrypted sessions, and trusted reconnects.
- Define security requirements for CGM and partner integrations, including BLE sensor onboarding, data authenticity, and cloud-to-cloud trust.
- Establish controls for protected health information in alignment with HIPAA, FDA cybersecurity expectations, and healthcare privacy obligations.
- Drive threat modeling and security risk assessments, mapping controls to hazards, requirements, and residual risk within a regulated quality system.
- Review architectures and critical implementations, mentor senior engineers, and ensure security intent is preserved in implementation.
- Partner with Product Security, firmware, mobile, cloud, quality, human factors, and regulatory teams on security controls, interface contracts, verification evidence, and regulatory documentation.
- Serve on the Security Council by providing threat models, security positions, design guidance, and field-issue recommendations.
- Define vulnerability detection, response, and recording processes across the device fleet, mobile apps, and partner-connected paths.
- Review the security of shared non-UI logic used across platforms while therapy user interfaces remain native to iOS or Android.
Requirements
- Bachelor’s degree in computer science, Electrical Engineering, or Computer Engineering is required.
- At least 10 years of professional experience, including substantial recent work architecting security for production connected systems.
- Demonstrated experience designing PKI and cryptographic key lifecycles, including issuance, storage, rotation, and revocation.
- Experience with identity architecture spanning devices, users, and cloud services, including authentication and authorization.
- Demonstrated Bluetooth Low Energy security experience involving pairing, bonding, and encrypted sessions between mobile apps and constrained devices.
- Experience defining security architecture across embedded software, iOS and Android mobile apps, and a cloud backend.
- Working knowledge of HIPAA and protected health information handling.
- Experience operating within a regulated quality or design-control environment, including traceability and verification requirements.
- Ability to write and defend architecture decisions balancing safety, security, reliability, and delivery speed.
- Clear written and verbal communication with engineering, quality, regulatory, and clinical partners.
- Preferred experience with insulin delivery, CGM, or other Class II or Class III connected medical devices.
- Preferred knowledge of IEC 62304, ISO 14971, FDA design controls, and FDA premarket cybersecurity guidance.
- Preferred applied cryptography experience, including protocol selection, certificate lifecycle operations, and product-code key-use reviews.
- Preferred experience with secure boot, signed firmware updates, and key storage on constrained or embedded devices.
- Preferred cloud security architecture experience involving service identity, secrets management, least privilege, logging, and monitoring for device fleets.
- Preferred experience defining security requirements for third-party BLE sensors and partner cloud integrations.
- Preferred experience contributing cybersecurity content to regulatory submissions, threat models, or design history files.
- A graduate degree in Computer Science, Electrical Engineering, or Computer Engineering, or a recognized security certification such as CISSP, is preferred.
- Preferred experience mentoring senior engineers and setting security standards across teams as an individual contributor.
Benefits
- Hybrid work arrangement with 1–2 days per week in the office.
- Medical, dental, and vision insurance.
- 401(k) with company match.
- Paid time off (PTO).
- Additional employee wellness programs.
- The position may be eligible for incentive compensation.
- The posting remains open until the position is filled.
Tech Stack
Categories
About Insulet
Insulet Corporation (NASDAQ: PODD), headquartered in Massachusetts, is an innovative medical device company dedicated to simplifying life for people with diabetes and other conditions through its Omnipod product platform. The Omnipod Insulin Management System provides a unique alternative to traditional insulin delivery methods. With its simple, wearable design, the tubeless disposable Pod provides up to three days of non-stop insulin delivery, without the need to see or handle a needle. Insulet’s flagship innovation, the Omnipod 5 Automated Insulin Delivery System, integrates with a continuous glucose monitor to manage blood sugar with no multiple daily injections, zero fingersticks, and can be controlled by a compatible personal smartphone in the U.S. or by the Omnipod 5 Controller. Omnipod products are offered in 25 countries around the globe. HIRING SCAM ALERT Recently, individuals impersonating Insulet Human Resources members have offered fraudulent interviews and job offers to unsuspecting candidates. To help protect you from these scam artists, please be aware that: • Insulet will never interview a candidate over RingCentral, similar messaging apps or social media (i.e. Google Hangouts, WhatsApp, Facebook Messenger, etc.), or via text message. • Insulet will never send a company check or ask an applicant to pay a fee or purchase at home work/training materials in connection with an application for employment. • Insulet will never provide excess money to an applicant and ask the applicant to write a check for repayment. If you have any doubt about a job offer or any other communication purporting to come from Insulet, please reach out to us directly at 978-600-7000. If you receive any type of communication on behalf of Insulet that seems inappropriate or suspicious, please report this activity to: www.iC3.gov or www.stopfraud.gov.