Position Overview
Lead product cybersecurity operations across the product lifecycle, including incident response, continuous surveillance, vulnerability management, risk assessment, and security monitoring. Partner cross-functionally with Engineering, Quality, Regulatory, Product Management, PSO, Global-IT, and Operations to identify, prioritize, and mitigate cybersecurity risks.
Cybersecurity Incident Response
- Lead incident triage, investigation, containment, remediation, recovery, and root-cause analysis for product cybersecurity incidents.
- Coordinate cross-functional response teams, escalation, documentation, and regulatory/customer notification assessments.
Continuous Security Surveillance
- Monitor emerging threats, vulnerabilities, exploits, security advisories, and threat intelligence relevant to the product portfolio.
- Assess emerging threats and proactively identify potential product exposure and required security actions.
Vulnerability Management
- Lead end-to-end vulnerability management, from identification and risk assessment through remediation, mitigation, and closure.
- Prioritize vulnerabilities based on severity, exploitability, exposure, product impact, and business/regulatory risk.
Cybersecurity Risk & Impact Assessment
- Conduct cybersecurity risk and impact assessments across the product lifecycle, including threats, vulnerabilities, attack paths, and security controls.
- Translate technical findings into product, patient/customer, business, and regulatory risk and recommend appropriate mitigation or risk acceptance.
SIEM / SOC & Security Monitoring
- Integrate product cybersecurity signals, telemetry, threat intelligence, and vulnerability data into security monitoring.
- Define monitoring requirements, detection use cases, alerting, escalation criteria, and opportunities for automated threat detection.
Leadership Communication
- Provide timely executive communication on significant incidents, emerging vulnerabilities, cybersecurity risk, and remediation status.
- Translate complex technical issues into concise risk assessments, recommendations, decisions, and business impact for senior leadership.
Cross-Functional Collaboration
- Collaborate with Engineering, Software/Firmware, Quality, Regulatory, Product Management, Operations, and IT teams.
- Drive cybersecurity alignment across product development, deployment, monitoring, post-market surveillance, and lifecycle management.
Continuous Improvement
- Develop and mature cybersecurity processes, tools, automation, metrics, and operating models to improve security posture and response effectiveness.
- Establish KPIs/KRIs, dashboards, lessons-learned processes, and continuous improvement initiatives across product cybersecurity operations.
Qualifications
- Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field, with significant cybersecurity experience.
- 3 years experience in product cybersecurity, incident response, vulnerability management, threat intelligence, security operations, and cybersecurity risk management.
Preferred Experience
- Experience with Product Security, SIEM/SOC, vulnerability/exposure management, threat modeling, security architecture, and post-market cybersecurity.
- Experience with regulated or safety-critical industries and frameworks such as FDA cybersecurity requirements, IEC 81001-5-1, ISO 14971, IEC 62443, or ISO 27001.
Leadership Competencies
- Strong cybersecurity leadership, risk-based decision making, executive communication, and cross-functional influence.
- Ability to lead through high-pressure incidents, translate technical complexity into business decisions, and drive measurable security improvements.
Join our team in Minneapolis, MN, a vibrant city known for its innovation, culture, and quality of life. Be part of a dynamic environment where you can make a significant impact on product security and collaborate with top professionals in the industry.
