[Hiring] Director, Cyber Defense @MiniMed

Role Description

The Director, Cyber Defense — Security Operations & Offensive Security is accountable for building and operating MiniMed’s modern cyber defense capability. This leader owns the strategy, people, services, technology, and operating model that enable MiniMed to detect, investigate, respond to, test, and continuously improve its defenses across enterprise IT, cloud, identity, manufacturing and operational technology, applications, data, and connected-product ecosystems.

The successful candidate will bring an AI-native mentality to the way security services are designed and delivered. This means redesigning work around automation, APIs, telemetry, detection-as-code, and carefully governed AI agents.

• Define and execute MiniMed’s Cyber Defense strategy, roadmap, and operating model across enterprise IT, cloud, identity, applications, data, manufacturing and OT, and connected-product supporting services.
• Own 24x7x365 Security Operations, including monitoring, detection engineering, threat intelligence, threat hunting, exposure-informed defense, incident response, digital forensics, crisis readiness, and MSSP/MDR performance.
• Serve as senior incident commander for high-severity events and maintain the evidence, escalation, recovery, and reporting mechanisms required for executive, legal, privacy, regulatory, and disclosure decisions.
• Lead the enterprise Offensive Security program, including penetration testing, red teaming, adversary emulation, purple teaming, attack-path analysis, social engineering, breach-and-attack simulation, and control validation.
• Design Security Operations as AI-native services: automation-first, API-first, observable, measurable, and delivered through detection-as-code, runbook-as-code, governed AI agents, and reusable integrations.
• Build and lead a technically strong team, retain accountability for architecture, risk decisions, sensitive investigations, and incident command, and use managed services, platforms, and specialist providers selectively where they improve speed, quality, resilience, or cost.
• Own the build-versus-buy roadmap, vendor and service governance, tooling rationalization, capability sequencing, and transition to MiniMed’s standalone operating model.

Qualifications

• Bachelor's degree and minimum of 15 years of relevant cybersecurity experience with 7+ years of managerial experience.

Requirements

• Demonstrated experience building or leading a global, distributed, follow-the-sun, or hybrid 24x7 security operations capability and serving as incident commander for high-severity, business-impacting incidents.
• Deep understanding of SIEM, SOAR, EDR/XDR, cloud and identity telemetry, threat intelligence, threat hunting, digital forensics, detection engineering, vulnerability and exposure management, and security data platforms.
• Experience designing or operating automation-first security services using APIs, infrastructure-as-code, detection-as-code, runbook-as-code, and AI/ML or agent-enabled workflows with appropriate human oversight.
• Strong technical understanding of a selection of cloud platforms, operating systems, networking, application and product security, IAM, privileged access, key management, encryption, DLP, endpoint security, OT, and manufacturing environments.
• Experience managing MSSP/MDR, penetration-testing, threat-intelligence, or other specialist security providers, including build-versus-buy decisions and service performance governance.
• Certifications such as CISSP, CCSP, CISM, GIAC, OSCP, OSCE, CREST, or equivalent practical expertise; familiarity with NIST CSF, MITRE ATT&CK, OWASP, CIS Controls, FDA cybersecurity expectations, EU regulatory requirements, and relevant privacy and resilience obligations.
• Technical and credible leadership style. Calm, decisive, and thoughtful under pressure.
• Excellent verbal and written communication skills, including the ability to explain technical concepts and technologies to business leaders, and business concepts to the IT Security workforce.
• Experience in medical devices, healthcare, life sciences, manufacturing, critical infrastructure, or another highly regulated and high-availability environment; experience with connected products, IoT, mobile applications, product-cloud ecosystems, or software update channels is advantageous.
• Experience operating through a carve-out, separation, major transformation, or transition-services exit, and standing up security capabilities from the ground up.

Benefits

• Competitive salary and flexible benefits package.
• Robust benefits package, including health, dental, and vision insurance.
• Access to a Health Savings Account and Healthcare Flexible Spending Account.
• Life insurance and long-term disability leave.
• Dependent daycare spending account.
• Incentive plans and a 401(k) plan with company match.
• Short-term disability coverage and paid time off and holidays.
• Participation in the Employee Stock Purchase Plan and access to the Employee Assistance Program.
• Non-qualified Retirement Plan Supplement and Capital Accumulation Plan, subject to IRS minimum earnings requirements.