Cybersecurity Analyst – SBOMs & FDA | Medical Devices

Role:
Cybersecurity Analyst – Medical Devices | Product Security

Location:

Hyderabad, India (Hybrid)

Experience:

4–8 Years

Employment Type:

Hybrid (3 Days/Week In-Office)
Domain:  Healthcare & Life Sciences
Joining :
Immediate

Are you passionate about securing healthcare products and ensuring compliance with global cybersecurity regulations? Join our growing Product Security team and help build secure, compliant medical device software that improves patient outcomes.

Role Summary :
We are looking for a  Cybersecurity Analyst  with hands-on experience in  Product Security  within a regulated  Medical Device  or  Healthcare Technology  environment.
In this role, you will collaborate closely with  Product Security, Software Engineering, QA, and Regulatory Affairs teams to support critical cybersecurity  initiatives across the software development lifecycle.

Key Responsibilities :
Generate, maintain, and manage  Software Bill of Materials (SBOMs)  using industry-standard formats such as  CycloneDX  and  SPDX
Support  FDA cybersecurity submissions  by preparing and maintaining cybersecurity documentation aligned with regulatory requirements
Perform vulnerability analysis using  CVE ,  CVSS ,  NVD , and vendor security advisories
Coordinate remediation activities with development teams and verify vulnerability fixes
Develop and execute security test cases based on documented cybersecurity requirements
Collaborate with Product Security, Engineering, QA, and Regulatory teams throughout the product lifecycle
Support secure software development practices and contribute to continuous security improvements
Participate in security reviews, risk assessments, and compliance activities

Required Qualifications:

4–8 years of experience in  Cybersecurity ,  Product Security ,  Application Security , or  Embedded Software Security
Hands-on experience with  SBOM generation  and Software Composition Analysis (SCA) tools such as  Dependency-Track  or equivalent
Experience writing and executing security validation and verification test cases
Familiarity with the  FDA 2023 Final Guidance on Cybersecurity in Medical Devices
Strong understanding of vulnerability management, including:
CVE & CVSS scoring and National Vulnerability Database (NVD)
Vendor security advisories and Remediation workflows

Experience with  Git , source control, and CI/CD pipelines (Git Hub Actions, Jenkins, Azure Dev Ops, or similar)
Ability to collaborate effectively with global teams across multiple time zones

Preferred Qualifications:

Experience working in an  FDA-regulated Medical Device  or  Healthcare Technology  environment
Knowledge of industry security standards and frameworks, including:
IEC 62443 and IEC 81001-5-1 and NIST Cybersecurity Framework
Understanding of Secure Software Development Lifecycle (SSDLC)
Experience working with cross-functional engineering and regulatory teams

Interested?
Send your updated resume to    with the subject:
Cybersecurity Analyst – Medical Device Security
or apply directly via Linked In.