Senior Cybersecurity Operations Analyst

Overview

At Spacelabs Healthcare, our mission is to drive continuous innovation in healthcare technology to improve both clinical and economic outcomes. Our scalable solutions deliver critical patient data across local and remote systems, enabling better-informed clinical decisions, increased efficiency, and safer care environments.

Why Spacelabs? Because lives depend on what we build.

The Senior Cybersecurity Security Operations Analyst primary role is to monitor, detect, and respond to security incidents and threats in real-time, ensuring the safety and integrity of Spacelabs Cloud and Solutions infrastructure.  Threat monitoring, threat intelligence, incident investigation and response are all included as key areas of responsibility.  This role is an individual contributor but may add people management based on aptitude. 

Responsibilities

• Perform cybersecurity monitoring for Spacelabs Cloud Products and connected solutions. Continuously monitor security systems and alerts to identify potential threats or unusual activities.
• Incident Response:  Respond to security incidents by investigating alerts, containing threats, and mitigating damage.
• Threat Analysis:  Analyze and interpret security data to understand and anticipate potential threats and vulnerabilities.
• Participate in Information Sharing with the ISAO/ISAC, CISA and other organizations.
• Log Management:  Review and analyze logs from various sources to detect anomalies and breaches.
• Tool Support:  Collaborate with DevOPS to manage, configure and monitor security tools and technologies, such as firewalls and intrusion detection systems.
• Document incidents, responses, and resolutions, providing detailed reports to management.
• Collaboration and work with OSI IT and security teams, Spacelabs DevOPs and Product Engineering teams to improve overall security posture and response strategies.
• Collaborate with Product Management on Security Advisories and Notifications by providing content and expertise.
• Process development and improvement collaborating to refine SOC processes and staying updated on the latest security trends and technologies.
• Collaborates and shares knowledge with team members via formal and informal methods on a regular basis
• Participates as an active Spacelab Cybersecurity team member in requirement reviews and team meetings
• Participates in Training and Awareness Activities at Spacelabs.
• Follows corporate standards and procedures
• Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork.

Networking/Key relationships

• You will interface and collaborate on a regular basis with both the Cybersecurity Team, Operational Security, DevOPs and Engineering, Services and OSI Teams. 

Qualifications

• Knowlege/experience and understanding of firmware, operating systems, applications, networks and network protocols, encryption algorithms, Access Control Models
• Knowledge/experience and understanding of Software and Hardware engineering, reverse engineering, web applications, databases, scripting.
• Knowledge in coding languages (Assembly, C, C++, Java, C#, .NET, Python, etc.) found in software development.
• Knowledge in Operating Systems (Linux, MS Windows) Databases (MS SQL, MySQL, Postgres), Application/Web Servers (Apache, IIS, Wildfly)
• Knowledge/experience in Networking, including switching, routing, firewalls and vulnerabilities
• Knowledgable about AI (artificial intelligence)
• Security Testing Tools such but not limited to - Tenable Nessus, Rapid7 InsightVM, Metasploit, BurpSuite, NetSparker, Wireshark)
• Must have the ability to handle many software exploits and take ownership for the assigned security assessments
• Must have the ability to take ownership for high complexity Security Assessments.
• Ability to operate Spacelabs Medical Devices and Solutions.
• Secure Coding and Development (OWASP SAMM), MITRE/SANS Top 25)
• Secure Software Development Life Cycle
• Security Frameworks (ISO 2700x, NIST Special Publications)
• Static Code Analysis
• Cloud Development and Cloud Security Testing
• Understand medical device regulations and quality system requirements
• Familiarity with some common attacks:
  • Password Cracking
  • Cross site request forgery
  • Cross site scripting
  • Improper Authorization
  • Improper Authentication
  • Privilege Escalation

Agile/Digital Experience

• Passionate about Agile software processes, data-driven development, reliability, and experimentation
• Openness to working on a collaborative, cross-functional Agile solution team

Individual Skills:

• Self-motivated with strong problem-solving and learning skills
• Professional attitude and service orientation; team player
• Flexibility to changes in work direction as the project develops
• Good verbal and written communication and listening skills
• Ability to work well with others and under pressure
• Strong analytical and critical observation skills

Mindset and Behaviors:

• Passion for discovering and researching new vulnerabilities and exploitation techniques
• Strong work ethic; ability to work at an abstract level and gain consensus
• Able to build a sense of trust and rapport that creates a comfortable and effective workplace
• Attitude to thrive in a fast-paced environment
• Open minded to new approaches of learning
• Takes ownership and responsibility for data work

Internal Networking/Key Relationship

• To be determined based on department needs

Minimum Knowledge & Experience Required

• Bachelor's Degree plus a minimum of 15 years of related experience or Master's Degree plus a minimum of 8 years of related experience or waiver based on experience.
• Degree should be in a technical discipline such as Computer Science-Information Security or Cybersecurity or Software Engineering.

Travel Requirements - circa 10% of time

• Perform cybersecurity monitoring for Spacelabs Cloud Products and connected solutions. Continuously monitor security systems and alerts to identify potential threats or unusual activities.
• Incident Response:  Respond to security incidents by investigating alerts, containing threats, and mitigating damage.
• Threat Analysis:  Analyze and interpret security data to understand and anticipate potential threats and vulnerabilities.
• Participate in Information Sharing with the ISAO/ISAC, CISA and other organizations.
• Log Management:  Review and analyze logs from various sources to detect anomalies and breaches.
• Tool Support:  Collaborate with DevOPS to manage, configure and monitor security tools and technologies, such as firewalls and intrusion detection systems.
• Document incidents, responses, and resolutions, providing detailed reports to management.
• Collaboration and work with OSI IT and security teams, Spacelabs DevOPs and Product Engineering teams to improve overall security posture and response strategies.
• Collaborate with Product Management on Security Advisories and Notifications by providing content and expertise.
• Process development and improvement collaborating to refine SOC processes and staying updated on the latest security trends and technologies.
• Collaborates and shares knowledge with team members via formal and informal methods on a regular basis
• Participates as an active Spacelab Cybersecurity team member in requirement reviews and team meetings
• Participates in Training and Awareness Activities at Spacelabs.
• Follows corporate standards and procedures
• Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork.

Networking/Key relationships

• You will interface and collaborate on a regular basis with both the Cybersecurity Team, Operational Security, DevOPs and Engineering, Services and OSI Teams. 

• Knowlege/experience and understanding of firmware, operating systems, applications, networks and network protocols, encryption algorithms, Access Control Models
• Knowledge/experience and understanding of Software and Hardware engineering, reverse engineering, web applications, databases, scripting.
• Knowledge in coding languages (Assembly, C, C++, Java, C#, .NET, Python, etc.) found in software development.
• Knowledge in Operating Systems (Linux, MS Windows) Databases (MS SQL, MySQL, Postgres), Application/Web Servers (Apache, IIS, Wildfly)
• Knowledge/experience in Networking, including switching, routing, firewalls and vulnerabilities
• Knowledgable about AI (artificial intelligence)
• Security Testing Tools such but not limited to - Tenable Nessus, Rapid7 InsightVM, Metasploit, BurpSuite, NetSparker, Wireshark)
• Must have the ability to handle many software exploits and take ownership for the assigned security assessments
• Must have the ability to take ownership for high complexity Security Assessments.
• Ability to operate Spacelabs Medical Devices and Solutions.
• Secure Coding and Development (OWASP SAMM), MITRE/SANS Top 25)
• Secure Software Development Life Cycle
• Security Frameworks (ISO 2700x, NIST Special Publications)
• Static Code Analysis
• Cloud Development and Cloud Security Testing
• Understand medical device regulations and quality system requirements
• Familiarity with some common attacks:
  • Password Cracking
  • Cross site request forgery
  • Cross site scripting
  • Improper Authorization
  • Improper Authentication
  • Privilege Escalation

Agile/Digital Experience

• Passionate about Agile software processes, data-driven development, reliability, and experimentation
• Openness to working on a collaborative, cross-functional Agile solution team

Individual Skills:

• Self-motivated with strong problem-solving and learning skills
• Professional attitude and service orientation; team player
• Flexibility to changes in work direction as the project develops
• Good verbal and written communication and listening skills
• Ability to work well with others and under pressure
• Strong analytical and critical observation skills

Mindset and Behaviors:

• Passion for discovering and researching new vulnerabilities and exploitation techniques
• Strong work ethic; ability to work at an abstract level and gain consensus
• Able to build a sense of trust and rapport that creates a comfortable and effective workplace
• Attitude to thrive in a fast-paced environment
• Open minded to new approaches of learning
• Takes ownership and responsibility for data work

Internal Networking/Key Relationship

• To be determined based on department needs

Minimum Knowledge & Experience Required

• Bachelor's Degree plus a minimum of 15 years of related experience or Master's Degree plus a minimum of 8 years of related experience or waiver based on experience.
• Degree should be in a technical discipline such as Computer Science-Information Security or Cybersecurity or Software Engineering.

Travel Requirements - circa 10% of time