Product Security Analyst – Connected Medical Tech (Onsite)

AvetixCyber; San Francisco (CA); On-site; USD 90,000 - 140,000; Full time

Job summary

AvetixCyber is seeking a Cybersecurity Analyst for an onsite role in Austin, TX or Fremont, CA. You will lead product-level cybersecurity initiatives, policy development, and security operations to protect connected medical devices and maintain regulatory compliance.

You will work with engineering and business teams to embed security across the product lifecycle, oversee SIEM and endpoint protection, and drive vulnerability management and incident response programs.

Qualifications

• 5+ years in cybersecurity or information security.
• Experience with cloud security across AWS, Azure, or GCP.
• Familiarity with NIST, CIS, ISO, and MITRE frameworks.
• Healthcare regulatory experience is a strong plus.

Responsibilities

• Develop, implement, and maintain cybersecurity policies and standards for connected medical technology.
• Monitor networks and systems for security breaches using IDS/IPS tools.
• Conduct vulnerability assessments and penetration testing.
• Lead incident response investigations, reporting, and remediation.
• Ensure compliance with GDPR, HIPAA, and ISO 27001.
• Embed security into product and technology lifecycle with engineering teams.
• Manage security tooling (SIEM, firewalls, endpoint protection).
• Deliver cybersecurity training and awareness programs internally.

Skills

Network security

Cryptography

Threat modelling

Risk assessment

Regulatory compliance

Security policy development

Incident response

Tools

Splunk

Nessus

Wireshark

Burp Suite

OWASP ZAP

Job description

AvetixCyber is seeking a Cybersecurity Analyst for an onsite role in Austin, TX or Fremont, CA. You will lead product-level cybersecurity initiatives, policy development, and security operations to protect connected medical devices and maintain regulatory compliance.

You will work with engineering and business teams to embed security across the product lifecycle, oversee SIEM and endpoint protection, and drive vulnerability management and incident response programs.