Description

• Support cybersecurity reviews of products, applications, and platforms.
• Participate in architecture and design discussions to identify potential security risks and recommend mitigations.
• Assist with cybersecurity threat modeling activities and documentation.
• Review vulnerability assessment, penetration testing, SAST, and DAST findings and help teams prioritize remediation efforts.
• Support the development and maintenance of cybersecurity standards, guidance, and best practices.
• Collaborate with product owners, developers, architects, and engineers to integrate security requirements into product development processes.
• Assist in evaluating cybersecurity controls and identifying opportunities for improvement.
• Support risk assessments and help document security risks and mitigation plans.
• Monitor vulnerability remediation activities and assist with compliance tracking.
• Participate in governance meetings and provide cybersecurity input as needed.
• Stay informed on emerging cybersecurity threats and technologies.

Required Qualifications

• 5+ years of experience in cybersecurity, information security, application security, product security, or related technology roles.
• Experience working with software development or product engineering teams.
• Knowledge of cybersecurity frameworks such as NIST, ISO 27001, PCI DSS, SOC 2, or similar standards.
• Experience conducting security reviews, risk assessments, or control assessments.
• Understanding of cloud technologies, web applications, APIs, and modern software architectures.
• Familiarity with identity and access management concepts, secure software development, network security, and cryptography.
• Ability to communicate cybersecurity risks and recommendations effectively to technical and non-technical audiences.
• Strong analytical, organizational, and problem-solving skills.

Preferred Qualifications

• Experience supporting medical devices, healthcare technologies, IoT products, mobile applications, or cloud environments.
• Familiarity with vulnerability management, penetration testing results, SAST, and DAST tools.
• Knowledge of regulatory requirements such as HIPAA and medical device cybersecurity guidance.
• Experience with governance, risk, and compliance (GRC) processes.
• Security certifications such as Security+, CISSP, CISM, CCSP, HCISPP, or equivalent are a plus but not required

Key Skills

Education

Bachelor's degree