Job Summary:

As the Product Security Analyst, you can expect to be a key member of the Product Security team reporting to the Senior Manager of Product Security in Engineering. The Product Security Analyst is a key stakeholder involved in protecting the security and privacy of Natus products throughout their entire product lifecycle. The Product Security Analyst will be responsible for supporting customer product security and privacy inquiries, security and privacy product assessments, and the Natus secure development lifecycle, including new strategies, policies, procedures, and best practices.

As a subject matter expert in cyber security, the Product Security Analyst will work closely with global cross-functional teams to protect the confidentiality, integrity, and availability of Natus products and services from information security threats and vulnerabilities.

In this job, you will:

• Serve as the Subject Matter Expert (SME) on industry threat intelligence and best practices. This will require conducting research and staying up-to-date on emerging security trends, threats, and technologies while working closely with cross-functional teams to identify and deploy solutions within Natus products.
• Serve as the Subject Matter Expert (SME) on Natus Security policies, procedures, and guidelines. 
• Conduct Product Security Risk Assessments working with cross-functional teams as needed to identify threat sources and determine the likelihood and impact of successful exploitation of vulnerabilities on product assets and functions.
• Work with cross-functional teams to create Product Security Requirements based on risk assessment results, industry best practices and guidelines, customer feedback, emerging trends, threats intelligence, and emerging technologies.
• Work with Engineering teams to assess the cyber security posture products supporting security testing activities (e.g. SAST, SCA, Vulnerabilities Analysis, Pen Testing, etc.).
• Work with Marketing, Sales, and Service to respond to customer inquiries, questionnaires, and risk assessments
• Stay up-to-date and follow all Quality System procedures related to this job, which can affect the quality of products or services provided to our customers
• Travel: up to 15%. Occasional domestic or international travel to customer sites to investigate complex issues or for various product development activities.

Qualifications:

• Bachelor's degree (B.A.) from a four-year college or university; or three to five years related experience and/or training; or an equivalent combination of education and experience
• At least 3 years’ related experience developing Security/Risk Management policies and procedures
• Experience with secure architecture development and best practices
• Knowledge of Information security risk assessment methodologies and standards
• Ability to communicate with and influence technical and non-technical customers, colleagues, and vendors
• Ability to organize, prioritize, and coordinate multiple work activities and meet target deadlines in a fast paced environment
• Strength in statistical analysis, identification of trends, matching information to issues and relevant reporting

Desired Qualifications:

• A security professional designation is an asset (e.g. CISA, CISSP, etc.)
• Experience with Software or Hardware development is an asset
• Experience with System Testing or Quality Assurance is an asset
• Knowledge of the FDA Guidance of Post-market Management of Cybersecurity in Medical Devices is an asset
• Knowledge of the FDA Content of Pre-market Submissions for Management of Cybersecurity in Medical Devices; UL 2900 is an asset

Benefits:

Natus offers competitive salaries, comprehensive benefit package that starts on your 1st day, 401k match, 9 paid holidays, generous paid time off plan (4 weeks to start) and tuition reimbursement up to $5,000 annually.

EEO Statement:

Natus Medical is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, veteran status, disability, sexual orientation, gender identity, or any other protected status.