Cybersecurity Operations Analyst
On-site Cybersecurity Operations Analyst at THINK Surgical (a medical device company) in Fremont, CA. Roughly 60% security operations — monitoring MDR/SIEM alerts, incident response, vulnerability management, IAM — and 40% security projects, AI/data governance (Microsoft Purview, DLP), and compliance support (SOC 2, ITGC).
- Compensation
- Not disclosed
- Location
- Fremont, CA, US
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in a relevant field or equivalent experience
- 3-5 years of hands-on experience in cybersecurity, information security, or security-focused IT roles
- Experience investigating security events and coordinating remediation activities
- Experience managing vulnerability remediation efforts and security improvement initiatives
- Working knowledge of Security Operations, Vulnerability Management, Incident Response, IAM, Endpoint Security, and Data Protection controls
- Familiarity with data classification, data governance, information protection, or DLP concepts
- Understanding of cybersecurity risks of cloud services, SaaS platforms, and emerging AI technologies
- Strong analytical, troubleshooting, documentation, project coordination, and communication skills
- Ability to independently manage multiple priorities and projects with limited supervision
Nice to have
- Experience in healthcare, medical device, biotechnology, manufacturing, or other regulated industries
- Experience supporting SOC 2, HIPAA, NIST CSF, ISO 27001, ISO 13485, or FDA-regulated environments
- Experience with Microsoft 365 security technologies (Defender, Entra ID, Intune, Conditional Access, Purview)
- Experience implementing or supporting data governance, data classification, information protection, or DLP programs
- Familiarity with AI governance, emerging technology risk management, or responsible AI practices
- Relevant cybersecurity certification (e.g., Security+, CySA+, SSCP, GSEC, SC-200, AZ-500, CISSP, Associate of ISC2)
Full description
JOB SUMMARY
The Cybersecurity Operations Analyst is responsible for supporting and advancing THINK Surgical's cybersecurity program through a combination of security operations, incident response, vulnerability management, cybersecurity projects, compliance activities, AI governance initiatives, and data governance programs.
This role serves as a key contributor to the organization's overall cybersecurity and information protection strategy, helping secure systems, cloud services, endpoints, data, and emerging technologies while continuously improving cybersecurity maturity across the organization.
Approximately 60% of the role is focused on cybersecurity operations, vulnerability management, incident response, compliance support, and security administration. Approximately 40% of the role is focused on cybersecurity projects, AI governance, data governance initiatives, and continuous security improvement efforts.
The successful candidate will investigate security events, coordinate remediation efforts, support data protection initiatives, contribute to AI governance activities, and lead security improvement projects in collaboration with IT, Engineering, Quality, Compliance, and business stakeholders. This position is based at THINK’s corporate office.
DUTIES & RESPONSIBILITIES
Security Operations & Incident Response
- Monitor, triage, investigate, and respond to security alerts generated from MDR, SIEM, endpoint protection, cloud security, and identity security platforms.
- Conduct incident investigations, collect forensic evidence, analyze root causes, and document findings in accordance with established procedures.
- Coordinate containment, remediation, recovery, and communication activities related to cybersecurity incidents.
- Develop recommendations to improve security controls, monitoring capabilities, and response procedures based on incident findings.
- Assist with proactive threat hunting and security investigations.
- Maintain incident response documentation, playbooks, procedures, and lessons learned.
Vulnerability Management
- Own the vulnerability management lifecycle including identification, prioritization, remediation tracking, validation, risk acceptance, and reporting.
- Coordinate with IT, Engineering, and system owners to ensure timely remediation of identified vulnerabilities.
- Facilitate vulnerability review meetings and track remediation performance against established targets.
- Analyze vulnerability trends and provide risk-based recommendations to management.
- Assist with implementation of security hardening recommendations across endpoints, servers, cloud services, applications, and network infrastructure.