Product Cybersecurity Lead - Medical Devices

AvetixCyber; Austin (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

AvetixCyber is seeking a Cybersecurity Analyst in Austin, TX or Fremont, CA (Onsite) to lead product-level cybersecurity initiatives across the business.

You will develop and enforce security policies, monitor for breaches with IDS/IPS, conduct vulnerability assessments, and drive incident response while ensuring GDPR, HIPAA, and ISO 27001 compliance. Collaborate with engineering to embed security across the lifecycle.

Qualifications

• 5+ years in cybersecurity or information security.
• Strong grounding in network security, cryptography, threat modelling, and risk assessment.
• Familiarity with frameworks such as NIST, CIS, ISO, and MITRE.
• Hands-on with tools like Splunk, Nessus, Wireshark, Burp Suite, or OWASP ZAP.
• Cloud security experience across AWS, Azure, or GCP.
• Certifications (CISSP, CISM, CEH, OSCP, or AWS security) preferred.
• DevSecOps exposure and healthcare regulatory compliance experience are strong pluses.

Responsibilities

• Developing, implementing, and maintaining cybersecurity policies and standards specific to connected medical technology.
• Monitoring networks and systems for security breaches using intrusion detection/prevention tools.
• Running vulnerability assessments and penetration testing.
• Leading incident response - investigation, reporting, and remediation.
• Ensuring compliance with GDPR, HIPAA, and ISO 27001.
• Partnering with engineering and business teams to embed security into the product and technology lifecycle.
• Managing security tooling (SIEM, firewalls, endpoint protection).
• Delivering cybersecurity training and awareness programmes internally.

Skills

Network security

Threat modelling

Risk assessment

DevSecOps exposure

Regulatory compliance awareness

Tools

Splunk

Nessus

Wireshark

Burp Suite

OWASP ZAP

Job description

AvetixCyber is seeking a Cybersecurity Analyst in Austin, TX or Fremont, CA (Onsite) to lead product-level cybersecurity initiatives across the business.

You will develop and enforce security policies, monitor for breaches with IDS/IPS, conduct vulnerability assessments, and drive incident response while ensuring GDPR, HIPAA, and ISO 27001 compliance. Collaborate with engineering to embed security across the lifecycle.