Senior Analyst - Product Security

PRINCIPAL DUTIES AND RESPONSIBILITIES:

Support execution of product cybersecurity post-market surveillance activities across the product portfolio by monitoring security events, vulnerabilities, and emerging threats impacting products and connected systems.

Monitor, track, analyze, and document cybersecurity complaints, incidents, vulnerabilities, threat intelligence findings, and post-market security observations in accordance with established processes and regulatory requirements.

Assist in maintaining cybersecurity risk registers, issue trackers, remediation status reports, metrics dashboards, and portfolio-level security records to support ongoing risk management activities.

Support coordinated vulnerability disclosure (CVD) and product security incident response processes through vulnerability triage, stakeholder coordination, remediation tracking, escalation support, and documentation management.

Contribute to vulnerability assessments, penetration testing activities, phishing simulations, threat intelligence reviews, and security monitoring initiatives to identify and mitigate product and application security risks.

Support the preparation and maintenance of post-market surveillance (PMS) evidence, cybersecurity assessment reports, audit documentation, compliance records, and risk analysis artifacts.

Maintain and enhance standardized cybersecurity procedures, templates, SOPs, playbooks, and operational guidelines to ensure consistency across product security and surveillance activities.

Coordinate recurring cybersecurity operational activities with cross-functional teams including R&D, Quality, Regulatory, Engineering, Privacy, and IT stakeholders to support timely risk assessment and remediation efforts.

Support portfolio-wide documentation readiness for internal audits, external assessments, regulatory submissions, and compliance reviews related to product cybersecurity.

Assist in refining security monitoring capabilities, incident detection processes, reporting mechanisms, and automation opportunities to improve operational efficiency and threat response effectiveness.

Maintain awareness of evolving cybersecurity threats, software and hardware vulnerabilities, medical device cybersecurity regulations, and industry best practices relevant to product security and post-market monitoring.

Support awareness and communication initiatives by contributing to cybersecurity training, knowledge-sharing activities, and stakeholder guidance related to product security risks and responsibilities.

Prepare periodic reports and metrics on cybersecurity incidents, vulnerabilities, remediation status, and post-market surveillance trends, including recommendations for continuous improvement and risk mitigation.

Participate in operational review meetings, cross-functional governance discussions, and status tracking activities to ensure effective coordination, transparency, and continuity of cybersecurity operations and post-market surveillance activities.