Job description

Itamar At ZOLL, we re passionate about improving patient outcomes and helping save lives. We provide innovative technologies that make a meaningful difference in people s lives. Our medical devices, software and related services are used worldwide to diagnose and treat patients suffering from serious cardiopulmonary and respiratory conditions. ZOLL Itamar is an innovative medical device technology company that focuses on the development and manufacturing of Home Sleep Apnea Tests to aid in the diagnosis of respiratory sleep disorders. Our core product is the WatchPAT®️ family, a revolutionary FDA-cleared portable home sleep apnea test device, that is based on proprietary signal and analysis. 80% of patients who have sleep apnea are undiagnosed. We are committed to reach those undiagnosed patients and provide testing to promote wellness and enhance overall quality of life. WatchPAT®️ is commercially available within major markets including the U.S., Japan, and Europe, and is the leading home sleep apnea test in the US. ZOLL Itamar s corporate headquarters, research and development and manufacturing are located in Israel with U.S. headquarters based in Atlanta, GA. Job Type Hybrid Job Summary We are looking for a Product Security Manager to lead product security activities across our software, cloud, and medical device environments. The role requires a strong technical security background, hands-on understanding of software and cloud systems, and the ability to work closely with Engineering, DevOps, CloudOps, QA/RA, IT, and Compliance teams. The Product Security Manager will drive vulnerability management, security hardening, audit readiness, and security activities related to FDA submissions, FedRAMP, customer reviews, and other compliance requirements. Essential Functions Lead product security activities across applications, cloud services, infrastructure, and development processes. Support FDA, FedRAMP, customer audits, and other security compliance activities. Manage vulnerability review, CVE impact assessment, remediation tracking, and risk acceptance. Work with SBOM/BOM data, third-party components, open-source dependencies, and security scan results. Drive security hardening initiatives across products, environments, endpoints, and CI/CD pipelines. Partner with Engineering, DevOps, CloudOps, QA/RA, IT, and Security to identify gaps and ensure remediation. Support threat modeling, risk assessments, secure configuration reviews, and control validation. Prepare security evidence, procedures, guidelines, and technical summaries when needed. Track security action items, dependencies, timelines, and deliverables across teams. Required/Preferred Education and Experience B.Sc. in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience. 3-5 years of experience in product security, application security, DevSecOps, cloud security, infrastructure security, or technical security program management. Strong understanding of software development, cloud environments, CI/CD, operating systems, networking, and common security controls. Experience with vulnerability management, CVE analysis, remediation tracking, and security risk assessment. Experience working with engineering, DevOps, cloud, IT, or QA/RA teams on security improvements and remediation. Familiarity with security standards or regulatory frameworks such as FDA cybersecurity guidance, FedRAMP, NIST, ISO 27001, SOC 2, HIPAA, GDPR, or similar frameworks. Experience with medical device software, healthcare systems, SaaS products, or regulated environments. preferred Experience supporting FDA submissions, FedRAMP activities, customer security reviews, or formal audits. preferred Experience with SAST, DAST, SCA, container scanning, cloud security tools, endpoint security tools, and ticketing systems. preferred Experience with AWS security services, IAM, encryption, logging, monitoring, and network segmentation. preferred Experience with Kubernetes, Docker, CI/CD pipelines, and Infrastructure as Code. preferred Knowledge, Skills and Abilities Ability to understand security tool outputs, SBOMs, dependency scans, penetration test reports, and audit findings. Strong project management and cross-functional coordination skills. Excellent communication skills and ability to work with technical and non-technical stakeholders. Preferred Languages Hebrew - Expert English - Expert ZOLL is a fast-growing company that operates in more than 140 countries around the world. Our employees are inspired by a commitment to make a difference in patients lives, and our culture values innovation, self-motivation and an entrepreneurial spirit. Join us in our efforts to improve outcomes for underserved patients suffering from critical cardiopulmonary conditions and help save more lives.

Requirements

Must-haves

We are looking for a Product Security Manager to lead product security activities across our software, cloud, and medical device environments.
The role requires a strong technical security background, hands-on
understanding of software and cloud systems, and the ability to work closely with Engineering, DevOps, CloudOps, QA/RA, IT, and Compliance teams. The Product Security Manager will drive vulnerability management, security
hardening, audit readiness, and security activities related to FDA submissions, FedRAMP, customer reviews, and other compliance requirements.
Lead product security activities across applications, cloud services,
infrastructure, and development processes.
Support FDA, FedRAMP, customer audits, and other security compliance activities.
Manage vulnerability review, CVE impact assessment, remediation tracking, and risk acceptance.
Work with SBOM/BOM data, third-party components, open-source dependencies, and security scan results.
Drive security hardening initiatives across products, environments, endpoints, and CI/CD pipelines.
Partner with Engineering, DevOps, CloudOps, QA/RA, IT, and Security to identify gaps and ensure remediation.
Support threat modeling, risk assessments, secure configuration reviews, and control validation.
Prepare security evidence, procedures, guidelines, and technical summaries when needed.
Track security action items, dependencies, timelines, and deliverables across teams.
B.Sc. in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience.
3-5 years of experience in product security, application security, DevSecOps, cloud security, infrastructure security, or technical security program management.
Strong understanding of software development, cloud environments, CI/CD, operating systems, networking, and common security controls.

Nice-to-haves

Required/Preferred Education and Experience
Experience with medical device software, healthcare systems, SaaS products, or regulated environments. preferred
reviews, or formal audits. preferred
Experience with SAST, DAST, SCA, container scanning, cloud security tools, endpoint security tools, and ticketing systems. preferred
Experience with AWS security services, IAM, encryption, logging, monitoring, and network segmentation. preferred
Experience with Kubernetes, Docker, CI/CD pipelines, and Infrastructure as Code. preferred
Preferred Languages

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdawskubernetesdocker

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Wellness