Cybersecurity Analyst II

Title:
Cybersecurity Analyst II

Location:

This position is based in our Campbell, California offices. This position is on-site, full-time

Do you want to make a real impact on patients? Imperative Care is changing the way stroke and vascular diseases are treated.

As part of our team, you’d be developing breakthroughs that will revolutionize the future of stroke care. Every day, the technologies that we develop at Imperative Care directly impact human lives. Our focus is on the needs of the patient, and they come first in everything we do.

The Cybersecurity Analyst II is responsible for strengthening Imperative Care’s enterprise cybersecurity posture across endpoints, cloud services, networks, applications, and third-party environments. This role monitors and responds to security events, administers Crowd Strike endpoint detection and response (EDR), and Rapid7 security information and event management (SIEM) capabilities, drives endpoint hardening and vulnerability remediation, and delivers employee security awareness programs. Working cross-functionally with Information Technology, Quality, Regulatory, Legal, Engineering, and business teams, the analyst supports incident response, penetration testing, security policy development, audit readiness, and risk reduction activities in a regulated medical technology environment.

• Monitor, triage, investigate, and respond to security alerts from Rapid7 SIEM, Crowd Strike EDR, cloud, identity, network, and endpoint telemetry sources.
• Lead or coordinate incident response activities, including validation, containment, eradication, recovery, root-cause analysis, evidence preservation, and post-incident reporting.
• Maintain and test incident response playbooks, escalation procedures, communications, and tabletop exercises; participate in after-hours response when needed.
• Administer and optimize Crowd Strike Falcon, including sensor health, prevention policies, detections, exclusions, endpoint isolation, and response workflows.
• Administer and continuously improve Rapid7 SIEM, including log-source onboarding, parsing, dashboards, use cases, correlation rules, alert tuning, retention, and event investigations.
• Define and enforce security baselines for Windows, macOS, and Linux endpoints, including patching, encryption, local privilege, application controls, secure configuration, and device hygiene.
• Conduct threat hunting across accounts, endpoints, and network segments; incorporate relevant threat intelligence and MITRE ATT&CK techniques into defensive operations.
• Perform vulnerability assessments and risk-based prioritization; partner with system owners to remediate findings, verify closure, document exceptions, and report remediation metrics and trends.
• Coordinate internal and third-party penetration testing, scope testing activities, evaluate findings, and drive remediation to closure.
• Design, deliver, and track semiannual security awareness training, phishing simulations, policy refreshers, and role-based materials; serve as a resource for employee security questions.

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related discipline required, and a minimum of one year hands-on cybersecurity experience with expertise in security operations, incident response, endpoint security, SIEM, vulnerability management; or an equivalent combination of education and experience.
• Demonstrated experience with Crowd Strike Falcon administration and/or Rapid7 InsightIDR platforms, or comparable enterprise EDR, or SIEM. This experience includes onboarding log sources, developing and tuning detections, managing policies and sensors, and conducting investigations; direct experience with both platforms strongly preferred.
• Experience securing Windows, macOS, and Linux endpoints and applying hardening baselines, patching, encryption, privilege-management, and endpoint-management controls.
• Working knowledge of network, cloud, and identity security fundamentals, including TCP/IP, DNS, IAM, multifactor authentication, single sign-on, privileged access, firewalls, and secure logging.
• Experience with…