Product Security Lead: Threat Modeling & Compliance

Intuitive Surgical, Inc. in; Sunnyvale (CA); On-site; USD 171,000 - 289,000; Full time

Job summary

Intuitive Surgical, Inc. seeks a Manager, Product Security Analysis (Finance) to lead a security-focused team.

You will drive threat modeling, risk assessments, and regulatory compliance across Intuitive medical device platforms, partnering with legal, quality, regulatory, and software groups to safeguard products. The role emphasizes leadership of a 4–5 person team, established expertise in cybersecurity for medical devices, and collaboration across disciplines to uphold patient safety and data

Qualifications

• Minimum 8 years as an individual contributor with 1–3 years in people management or equivalent leadership experience.
• Deep understanding of cybersecurity attacks, threat analysis, ethical hacking, and system auditing.
• Strong design and development skills for secure products.
• Experience with medical device cybersecurity regulations (FDA, HIPAA) preferred.

Responsibilities

• Lead and manage a team of 4–5 Product Security Analysts across security design assessments.
• Drive threat modeling, attack surface analysis, and risk assessments using STRIDE and attack trees.
• Oversee compliance with FDA cybersecurity guidance and applicable regulations.
• Develop and improve security policies and departmental processes.
• Collaborate across cross-functional teams and with vendors to meet security objectives.
• Mentor team members and align goals with organizational needs.

Skills

Threat modeling

STRIDE

Security risk analysis

Team leadership

Medical device cybersecurity

Education

University degree

Job description

Intuitive Surgical, Inc. seeks a Manager, Product Security Analysis (Finance) to lead a security-focused team.

You will drive threat modeling, risk assessments, and regulatory compliance across Intuitive medical device platforms, partnering with legal, quality, regulatory, and software groups to safeguard products. The role emphasizes leadership of a 4–5 person team, established expertise in cybersecurity for medical devices, and collaboration across disciplines to uphold patient safety and data