Embedded Product Security Analyst

The Product Security Analyst is primarily responsible for conducting security analysis of Intuitive Surgical products developing and documenting the cybersecurity threat models recommending security mitigations and deriving security requirements for surgical systems in Intuitive Surgical product portfolio including SinglePort MultiPort daVinci Surgical Systems ION system and associated and instruments and accessories.

Essential Job Duties

• Work closely with the product teams and understand our products in depth to analyze and document the security attack surface trust boundaries and data flows.
• Develop threat models that enumerate cybersecurity risks and threats.
• Document and verify the existing security mitigations and identify if additional mitigations are required for our products.
• Work with the product teams to provide guidance during mitigation design and development.
• Contribute to development and implementation of security test and verification protocols.
• Assist in conducting security verification and validation efforts.

Qualifications :

Required Education Skills & Experience

• Minimum 5 years of experience and a Bachelors degree; or 3 years of experience and a Masters degree; or a PhD without experience; or equivalent experience.
• In-depth knowledge of security concepts regarding embedded systems operating systems firmware and software security.
• Understanding of current and emerging security technologies and threats.
• In-depth knowledge of security risks and threats associated with wired and wireless device interfaces including USB JTAG serial ports UART SPI Ethernet Bluetooth and Wi-Fi.
• Proficient with methodologies tools best practices and processes across various cybersecurity areas.
• Experience working with Software Bill of Materials (SBOM) and vulnerability assessment of components in the SBOM.
• Knowledge of common security flaws and resolution as published by SANS MITRE (CVE CWE).
• Proven experience with threat modeling and risk analysis with ability to understand and score using the CVSS method.
• Ability to gather written and verbal information from multiple sources assess and consolidate risks to provide appropriate recommendations.

Desired Skills & Experience

• Experience with security analysis of medical devices and products.
• Experience with medical device cybersecurity regulations (FDA NMPA EU MDR MDCG HIPAA).
• Experience in Cybersecurity related data analytics machine learning anomaly detection and incident response.

Additional Information :

Due to the nature of our business and the role please note that Intuitive and/or your customer(s) may require that you show current proof of vaccination against certain diseases including COVID-19.  Details can vary by role.

Intuitive is an Equal Opportunity Employer. We provide equal employment opportunities to all qualified applicants and employees and prohibit discrimination and harassment of any type without regard to race sex pregnancy sexual orientation gender identity national origin color age religion protected veteran or disability status genetic information or any other status protected under federal state or local applicable laws.

Mandatory Notices

U.S. Export Controls Disclaimer:  In accordance with the U.S. Export Administration Regulations (15 CFR 743.13(b)) some roles at Intuitive Surgical may be subject to U.S. export controls for prospective employeeswho are nationals from countries currently on embargo or sanctions status.

Certain information you provide as part of the application will be used for purposes of determining whether Intuitive Surgical will need to (i) obtain an export license from the U.S. Government on your behalf (note: the governments licensing process can take 3 to 6 months) or (ii) implement a Technology Control Plan (TCP) (note: typically adds 2 weeks to the hiring process).  

For any Intuitive role subject to export controls final offers are contingent upon obtaining an approved export license and/or an executed TCP prior to the prospective employeesstart date which may or may not be flexible and within a timeframe that does not unreasonably impede the hiring need. If applicable candidates will be notified and instructed on any requirements for these purposes. 

We will consider for employment qualified applicants with arrest and conviction records in accordance with fair chance laws.

Preference will be given to qualified candidates who do not reside or plan to reside in Alabama Arkansas Delaware Florida Indiana Iowa Louisiana Maryland Mississippi Missouri Oklahoma Pennsylvania South Carolina or Tennessee.

This position may be filled at a different job level than listed here depending on
business need and/or on the selected candidates experience knowledge and skills.
Compensation will be based primarily on the job level at which the role is filled and the
candidates qualifications consistent with applicable law.

Accommodation & Accessibility Notice:

Intuitive is committed to providing reasonable accommodations to qualified individuals with disabilities. If you require assistance or an accommodation during any part of the application or interview process please contact People Services at

We provide market-competitive compensation packages inclusive of base pay incentives benefits and equity. It would not be typical for someone to be hired at the top end of range for the role as actual pay will be determined based on several factors including experience skills and qualifications. The target compensation ranges are listed.

Remote Work :

No

Employment Type :

Full-time