Irhythmtech

Irhythmtech

Product Security Manager

Remote - US · Senior

Sponsorship not specified$171k-$800kDetected 31 days ago
AlgorithmsGitData AnalysisCybersecurityPenetration TestingDetection EngineeringIncident ResponseComplianceProduct ManagementHIPAAPatient CareFDA RegulatoryMedical DevicesCommunicationCollaborationProblem SolvingCISSP

About the role

  • We are seeking a Senior Product Security Engineer with medical device experience who will ensure robust protection of patient data, device integrity, and regulatory compliance.

Responsibilities

  • Threat Modeling: Develop and maintain device-specific cyber threat models, factoring in patient safety, data privacy, and operational continuity.
  • Security Documentation: Create and maintain cybersecurity documentation for pre- and post-market activities, ensuring regulatory alignment.
  • Data Flow Diagrams: Produce detailed data flow diagrams to support the threat modeling process.
  • Threat Detection Tools: Leverage and maintain application and threat detection tools (Veracode, Snyk, GitLab, or equivalent) to identify security flaws early in the SDLC.
  • Incident Response: Support investigation and remediation of device-related security incidents, minimizing impact and preventing recurrence.
  • Data Privacy Compliance: Partner with the Privacy Team to ensure adherence to HIPAA, GDPR, and other data protection regulations.
  • Develop and maintain device-specific cyber threat models, factoring in patient safety, data privacy, and operational continuity.
  • Create and maintain cybersecurity documentation for pre- and post-market activities, ensuring regulatory alignment.
  • Produce detailed data flow diagrams to support the threat modeling process.
  • Support investigation and remediation of device-related security incidents, minimizing impact and preventing recurrence.

Requirements

  • Bachelor's degree in Computer Science, Information Security, or related field.
  • Strong understanding of security principles, methodologies, and tools within the PDLC and SDLC.
  • Experience operating in a regulated environment (FDA, HIPAA, GDPR, international regulatory frameworks).
  • Ability to understand intro dependencies of teams across

Nice to have

  • Experience with international frameworks and standards (EU MDR, JIS T 2304 / IEC 62304).
  • Understanding penetration testing methodologies and tools, able to work with pen test teams independently with little guidance.
  • $127,000.00 - $165,000.00
  • We welcome and celebrate people of all backgrounds, experiences, skills, and perspectives. iRhythm Technologies, Inc. is an Equal Opportunity Employer.
  • We will consider for employment all qualified applicants with arrest and conviction records in accordance with all applicable laws.
  • iRhythm provides reasonable accommodations for qualified individuals with disabilities in job application procedures, including those who may have any difficulty using our online system.
  • If you need such an accommodation, you may contact us at taops@irhythmtech.com
  • About iRhythm Technologies

Compensation

  • Estimated Pay Range

Benefits

  • Curious and innovative problem solvers looking for the chance to meaningfully shape the future of cardiac health, our company, and your career
  • iRhythm is a leading digital healthcare company that creates trusted solutions that detect, predict, and prevent disease.
  • Through a relentless focus on patient care, iRhythm's vision is to deliver better data, better insights, and better health for all.

Company info

  • As a part of our core values, we ensure an inclusive workforce.

Equal opportunity

  • Equal Opportunity Employer.
Apply directly at Irhythmtech →Create a free account for alerts like thisView Irhythmtech immigration profile

This listing is sourced directly from Irhythmtech's careers page and normalized into a canonical job model.