Product Security Analyst

Join Natus Sensory to start a new adventure in the medical device industry today and make a difference in someone’s life.

Our Product Security Analyst (Remote) works closely with global cross-functional teams to protect the confidentiality, integrity, and availability of Natus medical devices and services from information security threats and vulnerabilities. The role supports customer product security and privacy inquiries, security and privacy product assessments, and the Natus secure development lifecycle, including new strategies, policies, procedures, and best practices.

Here’s what you can expect:

Location: Remote

Main Responsibilities

• Serve as the Subject Matter Expert (SME) on industry threat intelligence and best practices. This will require conducting research and staying up-to-date on emerging security trends, threats, and technologies while working closely with cross-functional teams to identify and deploy solutions within Natus products.
• Conduct Product Security Risk Assessments working with cross-functional teams as needed to identify threat sources and determine the likelihood and impact of successful exploitation of vulnerabilities on product assets and functions.
• Work with cross-functional teams to create Product Security Requirements based on risk assessment results, industry best practices and guidelines, customer feedback, emerging trends, threats intelligence, and emerging technologies.
• Work with Engineering teams to assess the cybersecurity posture products supporting security testing activities (e.g. SAST, SCA, Vulnerabilities Analysis, Pen Testing, etc.).
• Work with Marketing, Sales, and Service to respond to customer inquiries, questionnaires, and risk assessments
• Travel: Up to 10% domestic or international travel on an as needed basis to visit a Natus or customer site for complex investigations

Qualifications

Product Security Analyst Qualifications

• Bachelor's degree (B.A.) from a four-year college or university and five years’ related experience and/or training; an equivalent combination of education and experience can be considered
• At least three years’ related experience in Cybersecurity in a heavily regulated environment
• Demonstrated experience with system security, security compliance and securing developmental lifecycles
• Knowledge of Information security risk assessment methodologies and standards
• Ability to communicate with and influence technical and non-technical customers, colleagues, and vendors
• Ability to organize, prioritize, and coordinate multiple work activities and meet target deadlines in a fast paced environment
• Strength in statistical analysis, identification of trends, matching information to issues and relevant reporting
• Developing knowledge of information security best practices, standards, guidelines, and frameworks, including NIST 800-53, NIST RMF, and NIST CSF. Strongly preferred: FDA Pre-market and Post-market Guidance for Cybersecurity in Medical Devices, the HIPPA Security Rule, HSCC Joint Security Plan, AAMI TIR57, ISO/IEC 27000 family.

We offer

• The role is a work-from-home remote position.
• Minimal travelling: less than 5%
• Collaborative and international environment with different cultures.
• English company language.

EEO Statement

Natus Sensory is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, veteran status, disability, sexual orientation, gender identity, or any other protected status.