Embedded Product Security Analyst
Intuitive
Summary
The Product Security Analyst is primarily responsible for conducting security analysis of Intuitive Surgical products, developing, and documenting the cybersecurity threat models, recommending security mitigations, and deriving security requirements for surgical systems in Intuitive Surgical product portfolio, including SinglePort, MultiPort daVinci Surgical Systems, ION system and associated instruments and accessories.
Job description
Essential Job Duties
- Work closely with the product teams and understand our products in depth to analyze and document the security attack surface, trust boundaries and data flows.
- Develop threat models that enumerate cybersecurity risks and threats.
- Document and verify the existing security mitigations and identify if additional mitigations are required for our products.
- Work with the product teams to provide guidance during mitigation design and development.
- Contribute to development and implementation of security test and verification protocols.
- Assist in conducting security verification and validation efforts.
Required Education, Skills & Experience
- Minimum 5 years of experience and a Bachelor's degree; or 3 years of experience and a Master's degree; or a PhD without experience; or equivalent experience.
- In-depth knowledge of security concepts regarding embedded systems, operating systems, firmware, and software security.
- Understanding of current and emerging security technologies and threats.
- In-depth knowledge of security risks and threats associated with wired and wireless device interfaces including USB, JTAG, serial ports, UART, SPI, Ethernet, Bluetooth and Wi-Fi.
- Proficient with methodologies, tools, best practices, and processes across various cybersecurity areas.
- Experience working with Software Bill of Materials (SBOM) and vulnerability assessment of components in the SBOM.
- Knowledge of common security flaws and resolution as published by SANS, MITRE (CVE, CWE).
- Proven experience with threat modeling and risk analysis with ability to understand and score using the CVSS method.
- Ability to gather written and verbal information from multiple sources, assess and consolidate risks to provide appropriate recommendations.
Desired Skills & Experience
- Experience with security analysis of medical devices and products.
- Experience with medical device cybersecurity regulations (FDA, NMPA, EU MDR, MDCG, HIPAA).
- Experience in Cybersecurity related data analytics, machine learning, anomaly detection and incident response.
Requirements
- Minimum 5 years of experience and a Bachelor's degree; or 3 years of experience and a Master's degree; or a PhD without experience; or equivalent experience
- In-depth knowledge of security concepts regarding embedded systems, operating systems, firmware, and software security
- Understanding of current and emerging security technologies and threats
- In-depth knowledge of security risks and threats associated with wired and wireless device interfaces including USB, JTAG, serial ports, UART, SPI, Ethernet, Bluetooth and Wi-Fi
- Proficient with methodologies, tools, best practices, and processes across various cybersecurity areas
- Experience working with Software Bill of Materials (SBOM) and vulnerability assessment of components in the SBOM
- Knowledge of common security flaws and resolution as published by SANS, MITRE (CVE, CWE)
- Proven experience with threat modeling and risk analysis with ability to understand and score using the CVSS method
- Ability to gather written and verbal information from multiple sources, assess and consolidate risks to provide appropriate recommendations
- Experience with security analysis of medical devices and products
- Experience with medical device cybersecurity regulations (FDA, NMPA, EU MDR, MDCG, HIPAA)
- Experience in Cybersecurity related data analytics, machine learning, anomaly detection and incident response
Benefits
- Market-competitive compensation
- Incentives
- Equity
- Medical, Dental & Vision
Company overview
Intuitive Surgical, Inc., commonly known as Intuitive, is a global technology leader in minimally invasive care and the pioneer of robotic-assisted surgery. Founded in 1995 and headquartered in Sunnyvale, California, the company has revolutionized surgical procedures through its flagship da Vinci Surgical System and Ion endoluminal system. As a publicly traded company on NASDAQ (ISRG), Intuitive has established itself as the dominant player in robotic surgery, with over 15,000 employees worldwide and an installed base of thousands of surgical systems across more than 60 countries. The company's innovative platforms enable surgeons to perform complex procedures with enhanced precision, flexibility, and control through minimally invasive techniques. Intuitive's technology portfolio includes advanced vision systems, wristed instruments, and intelligent software that work together to optimize surgical outcomes. The company continues to expand its product offerings and geographic presence while maintaining a strong focus on clinical evidence, physician training, and patient safety. With annual revenues exceeding $8 billion, Intuitive represents a transformative force in modern healthcare, driving the adoption of robotic-assisted procedures across multiple surgical specialties including urology, gynecology, general surgery, and thoracic surgery.