Embedded Product Security Analyst

Intuitive Surgical, Inc. in; Sunnyvale (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Intuitive Surgical seeks a Product Security Analyst to conduct security analysis across the portfolio, including SinglePort, MultiPort daVinci, and ION systems. You will map attack surfaces, trust boundaries, and data flows, and define cybersecurity requirements for surgical devices.

You will develop threat models, verify mitigations, guide design and testing, and help implement security verification and validation protocols across product teams in Sunnyvale.

Qualifications

• Experience analyzing product security attack surfaces and data flows.
• Ability to develop threat models enumerating cybersecurity risks.
• Experience documenting and verifying security mitigations for products.
• Ability to guide mitigation design and development with product teams.
• Experience developing security test and verification protocols.

Responsibilities

• Work with product teams to analyze and document security attack surfaces, trust boundaries and data flows.
• Develop threat models that enumerate cybersecurity risks and threats.
• Document and verify existing security mitigations and identify additional mitigations needed.
• Provide guidance during mitigation design and development.
• Contribute to development and implementation of security test and verification protocols.
• Assist in conducting security verification and validation efforts.

Skills

Security analysis

Threat modeling

Documentation

Security testing

Security verification

Job description

Job Description

The Product Security Analyst is primarily responsible for conducting security analysis of Intuitive Surgical products, developing, and documenting the cybersecurity threat models, recommending security mitigations, and deriving security requirements for surgical systems in Intuitive Surgical product portfolio, including SinglePort, MultiPort daVinci Surgical Systems, ION system and associated and instruments and accessories.

Essential Job Duties

• Work closely with the product teams and understand our products in depth to analyze and document the security attack surface, trust boundaries and data flows.
• Develop threat models that enumerate cybersecurity risks and threats.
• Document and verify the existing security mitigations and identify if additional mitigations are required for our products.
• Work with the product teams to provide guidance during mitigation design and development.
• Contribute to development and implementation of security test and verification protocols.
• Assist in conducting security verification and validation efforts.