Security Analyst
18 hours ago
Boldly innovating to create trusted solutions that detect, predict, and prevent disease.
Discover your power to innovate while making a difference in patients‘ lives.iRhythm is advancing cardiac care...Join Us Now
At iRhythm, we are dedicated, self-motivated, and driven to do the right thing for our patients, clinicians, and coworkers. Our leadership is focused and committed to iRhythm‘s employees and the mission of the company. We are better together, embrace change and help one another. We are Thinking Bigger and Moving Faster.
About This Role
As a Staff Product Security Analyst, you will play a critical role in safeguarding our medical devices by identifying, assessing, and mitigating security risks specific to the healthcare industry and medical devices. You will be embedded with the software engineering and work closely with cyber security, development teams, product managers, and regulatory affairs to ensure that security is integrated into the product development lifecycle from the earliest stages, in compliance with Regulatory Agencies‘ Cybersecurity requirements (e.g., FDA, BSI and PMDA).
Responsibilities:
Lead and own the end-to-end device product security management process with the following responsibilities:
* FDA Cybersecurity Compliance: Ensure compliance with FDA Cybersecurity guidance and regulations through collaboration with the Cyber Security, Regulatory and Quality, and Systems Development teams.
* Risk Assessments: Conduct comprehensive risk assessments of medical devices, identifying potential vulnerabilities and threats specific to the device hardware, firmware, and associated software.
* Threat Modeling: Develop and maintain cyber threat models for medical devices, considering factors such as patient safety, cyber security data privacy, and operational continuity.
* Software Bill of Materials (SBOM): Familiarity with SBOMs and the ability to communicate technical details effectively
* Product Security Policy documentation: Develop and maintain required medical device cyber security documentation as part of the device DHF including pre and post market cyber security activities and filings.
* Data Flow Diagrams: Ability to detail data flow diagrams at sufficient detail that can be leveraged throughout the threat modeling process.
* Security Design Reviews: Participate in security design reviews of medical device architectures and implementations, cybersecurity impact assessment from device design changes and providing recommendations for system security requirements that meet Regulatory and QMS requirements.
* Secure Coding Practices: Promote and guide secure coding practices within development teams, providing guidance and training specific to medical devices.
* Incident Response: Assist in the investigation and resolution of security incidents related to medical devices, coordinating with relevant teams to minimize impact and prevent future occurrences.
* Vulnerability Management: Assist the Cybersecurity team in execution and maintenance of the vulnerability identification program for medical devices, including vulnerability scanning, patching, and remediation.
* Data Privacy: Collaborate with the Privacy Team to ensure compliance with data privacy regulations, such as HIPAA, GDPR, and other applicable laws.
Qualifications:
* Bachelor‘s degree in computer science, information security, or a related field.
* 12+ years of experience in information security, with a focus on product security for medical devices.
* Strong understanding of security principles, methodologies, and tools specific to medical devices.
* Exceptional writing, editing, and proofreading abilities.
* Familiarity with content management systems (CMS) and/or document repository systems.
* Experience with vulnerability scanning, penetration testing, and threat modeling in the healthcare context.
* Expertise with FDA Cybersecurity guidance, regulations, and industry best practices.
* Familiarity with other Cybersecurity frameworks such as the NIST Cyber Security Framework and NIST SP 800-171.
* Knowledge of secure coding practices and development methodologies (e.g., Agile, DevOps) for medical devices.
* Experience with medical device design control requirements for software development and regulatory processes.
* Excellent problem-solving, analytical, and communication skills.
* Demonstrated ability to work on significant and unique issues where analysis of situations or data requires an evaluation of intangibles. Exercise independent judgment in methods, techniques, and evaluation criteria for obtaining results. As well as creates formal networks involving coordination among groups within and outside of their assigned function.
Preferred Qualifications:
* Certifications such as CISSP, CISM, CISA, or specialized medical device security certifications.
* Experience with international medical device cybersecurity frameworks and standards (EU MDR, Japan JIS T 2304 (IEC 62304)).
* Knowledge of specific programming languages and technologies used in medical device development.
FLSA Status: Exempt
#LI-JR1
Actual compensation may vary depending on job-related factors including knowledge, skills, experience, and work location.
Estimated Pay Range$1—$2 USDAs a part of our core values, we ensure a diverse and inclusive workforce. We welcome and celebrate people of all backgrounds, experiences, skills, and perspectives. iRhythm Technologies, Inc. is an Equal Opportunity Employer. We will consider for employment all qualified applicants with arrest and conviction records in accordance with all applicable laws.
iRhythm provides reasonable accommodations for qualified individuals with disabilities in job application procedures, including those who may have any difficulty using our online system. If you need such an accommodation, you may contact us at
About iRhythm Technologies
iRhythm is a leading digital healthcare company that creates trusted solutions that detect, predict, and prevent disease. Combining wearable biosensors and cloud-based data analytics with powerful proprietary algorithms, iRhythm distills data from millions of heartbeats into clinically actionable information. Through a relentless focus on patient care, iRhythm‘s vision is to deliver better data, better insights, and better health for all.
Make iRhythm your path forward. Zio, the heart monitor that changed the game.
-
Security Analyst
1 month ago
San Francisco, United States Abnormal Security Full timeJob DescriptionJob DescriptionAbout The RoleWe are looking for a Security Analyst to join our frontline cybersecurity defense team. As a Security Analyst, you will be responsible for identifying, catching, and preventing email fraud by efficiently handling a high volume of requests and applying policies. About YouDetail-oriented and passionate about...
-
Security Analyst
1 month ago
San Francisco, United States Abnormal Security Full timeJob DescriptionJob DescriptionAbout The RoleWe are looking for an Overnight Security Analyst to join our frontline cybersecurity defense team. As a Security Analyst, you will be responsible for identifying, catching, and preventing email fraud by efficiently handling a high volume of requests and applying policies.About YouDetail-oriented and passionate...
-
Lead Security Analyst
3 weeks ago
San Francisco, United States Optomi Full timeLead Security Analyst - Hybrid in Alexandria, VAOptomi, in partnership with a company in the IT Media and broadcasting space is looking to add a Lead Security Analyst to their growing team! The Lead Security Analyst will handle all escalated alerts from the MSSP and investigate events of interest and incidents as they are validated, prioritized, and...
-
Mainframe Security Analyst
1 month ago
San Francisco, United States Aloden, Inc. Full timeMainframe Security Analyst Location: San Francisco, CA 94103 (Hybrid - 3 days onsite, 2 days remote) Candidate Preference: Candidates located within 50-60 miles of San Francisco, CA Work Arrangement: Hybrid (3 days in the office, 2 days remote) Job Description: We are seeking a highly skilled Mainframe Security Analyst to protect our critical...
-
SOC Security Analyst III
2 days ago
San Francisco, United States BlueVoyant Full timeSOC Security Analyst IIILocation: Hybrid in the Philippines Office (50% of the time)The shift will be 4 X 10: 8am – 6pm PHL, Sunday – Wednesday or Wednesday – SaturdayBlueVoyant is looking for Security Operations Center (SOC) Security Analyst III to help our global customers manage their IT security. You will be part of a fast-paced team that helps...
-
SOC Security Analyst III
2 days ago
San Francisco, United States BlueVoyant Full timeSOC Security Analyst IIILocation: Hybrid in the Philippines Office 50% of the timeThe shift will be 4 X 10: 8am – 6pm PHL, Sunday – Wednesday or Wednesday – SaturdayBlueVoyant is looking for Security Operations Center (SOC) Security Analyst III to help our global customers manage their IT security. You will be part of a fast-paced team that helps...
-
Lead Incident Response Security Analyst
3 weeks ago
San Francisco, United States Optomi Full timeLead Incident Response Security Analyst - Hybrid in San Fran, CA*Optomi, in partnership with an IT Solutions company is looking to add a Lead Incident Response Security Analyst to their growing team! The Lead Incident Response Security Analyst will be part of a team investigating events of interest and incidents as they are validated, prioritized, and...
-
Cyber Security Threat Analyst
38 minutes ago
San Francisco, California, United States BlueVoyant Full timeAbout the RoleWe are seeking a highly skilled Cyber Security Threat Analyst to join our team at BlueVoyant.Job SummaryThis is an exciting opportunity for a professional with expertise in cyber security threat analysis to work on preventing and defending against advanced threats. The successful candidate will be responsible for analyzing raw data, identifying...
-
SOC Security Analyst
2 days ago
San Francisco, United States Allied Universal Full timeAllied Universal, North America’s leading security and facility services company, provides rewarding careers that give you a sense of purpose. While working in a dynamic, diverse and inclusive workplace, you will be part of a team that fuels a culture that will reflect in our communities and customers we serve. We offer medical, dental and vision coverage,...
-
Sr. Security Analyst
1 month ago
San Francisco, United States hims & hers Full timeHims & Hers Health, Inc. (better known as Hims & Hers) is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are revolutionizing telehealth for providers and their patients alike. Making personalized solutions accessible is of paramount importance to Hims & Hers and we are focused on...
-
San Francisco, California, United States Abnormal Security Full timeAbout Abnormal SecurityAbnormal Security is a pioneering provider of AI-driven cybersecurity solutions, dedicated to safeguarding organizations from the most sophisticated cyber threats. Our mission is to empower businesses with cutting-edge security technologies and exceptional financial management.Job OverviewWe are seeking a skilled Chief Financial...
-
san francisco, United States Optomi Full timeLead Security Analyst - Hybrid in Alexandria, VAOptomi, in partnership with a company in the IT Media and broadcasting space is looking to add a Lead Security Analyst to their growing team! The Lead Security Analyst will handle all escalated alerts from the MSSP and investigate events of interest and incidents as they are validated, prioritized, and...
-
san francisco, United States Optomi Full timeLead Security Analyst - Hybrid in Alexandria, VAOptomi, in partnership with a company in the IT Media and broadcasting space is looking to add a Lead Security Analyst to their growing team! The Lead Security Analyst will handle all escalated alerts from the MSSP and investigate events of interest and incidents as they are validated, prioritized, and...
-
Security Analyst
2 weeks ago
San Francisco, United States hackerone Full timeHackerOne is the global leader in human-powered security, harnessing the creativity of the world‘s largest community of security researchers with cutting-edge AI to protect your digital assets. The HackerOne Platform combines the expertise of our elite community and the most up-to-date vulnerability database to pinpoint critical security flaws across your...
-
Cyber Security Analyst
6 days ago
San Francisco, CA, United States Bluestone Software Full timeblueStone Recruiting is a national search firm with a focus of placing top Cyber Security talent from the Analyst level to CISO with prestigious organizations nationwide. Job Description Our client is seeking a Cyber Security Operations Analyst to support an operations team that serves a large government customer. The candidate will assist teammates and...
-
san francisco, United States Optomi Full timeLead Incident Response Security Analyst - Hybrid in San Fran, CA*Optomi, in partnership with an IT Solutions company is looking to add a Lead Incident Response Security Analyst to their growing team! The Lead Incident Response Security Analyst will be part of a team investigating events of interest and incidents as they are validated, prioritized, and...
-
san francisco, United States Optomi Full timeLead Incident Response Security Analyst - Hybrid in San Fran, CA*Optomi, in partnership with an IT Solutions company is looking to add a Lead Incident Response Security Analyst to their growing team! The Lead Incident Response Security Analyst will be part of a team investigating events of interest and incidents as they are validated, prioritized, and...
-
Security Operations Center
7 days ago
San Francisco, United States Unreal Gigs Full timeIntroduction: Do you thrive on being the first line of defense against cyber threats? Are you passionate about monitoring, detecting, and responding to security incidents in real-time? If you're a detail-oriented professional who loves investigating and stopping cyberattacks, then our client has the perfect opportunity for you. We’re looking for a Security...
-
Senior Cyber Security Analyst
2 months ago
San Antonio, United States University Health Full timePOSITION SUMMARY/RESPONSIBILITIES The Senior Cyber Security Analyst must have a deep understanding of information security protocols and a passion for protecting Community First Health Plans Inc. (Community First) healthcare data. In this role, the Senior Analyst will be instrumental in establishing and maintaining security standards across Community...
-
Information Security Analyst
6 days ago
San Jose, United States Cypress HCM Full timeInformation Security Risk Assessment Senior AnalystThis is an exciting opportunity to join a growing global company in the cloud-based software industry! As a Security Risk Assessment Sr. Analyst, you will support the Information SecurityRisk Management Program which is part of the organization's InfoSec Governance, Risk, and Compliance (GRC) team....
