Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
82
Хорошая вакансия
развернуть
Это четко описанная руководящая роль в важной сфере медицинских технологий, но широкий круг задач и ответственность за круглосуточную работу могут означать высокую нагрузку.
Кликните для подробной информации
Широкая зона ответственностиСовременный подходЗначимая сфераПодробное описание
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Director, Cyber Defense (Cybersecurity): Building and operating MiniMed’s modern cyber defense capability across enterprise IT, cloud, identity, manufacturing and operational technology, applications, data, and connected-product ecosystems with an accent on 24x7 security operations, offensive security, automation, and governed AI agents. Focus on leading high-severity incident response, designing detection-as-code and runbook-as-code services, building a technically strong team, and standing up security capabilities through a standalone operating-model transition.
Location: Virtual, Minnesota, United States of America; other location: Virtual, Georgia, United States of America. Workplace type: Flexible.
Salary: USD 186,000–316,000 annually for U.S. locations excluding Puerto Rico; eligible for an annual long-term incentive plan.
Company
hirify.global is a full-stack insulin delivery company developing intelligent dosing systems and predictive diabetes-care solutions.
What you will do
Define and execute the cyber defense strategy, roadmap, and operating model across enterprise IT, cloud, identity, applications, data, manufacturing and OT, and connected-product services.
Own 24x7x365 security operations covering monitoring, detection engineering, threat intelligence, threat hunting, exposure-informed defense, incident response, digital forensics, crisis readiness, and MSSP/MDR performance.
Serve as senior incident commander for high-severity events and maintain evidence, escalation, recovery, and reporting mechanisms for executive, legal, privacy, regulatory, and disclosure decisions.
Lead offensive security, including penetration testing, red teaming, adversary emulation, purple teaming, attack-path analysis, social engineering, breach-and-attack simulation, and control validation.
Design automation-first, API-first, observable, measurable security services using detection-as-code, runbook-as-code, governed AI agents, and reusable integrations.
Build and lead the technical team while owning architecture, risk decisions, sensitive investigations, incident command, vendor governance, tooling rationalization, build-versus-buy decisions, capability sequencing, and transition to the standalone operating model.
Requirements
Bachelor’s degree and at least 15 years of relevant cybersecurity experience, including 7 or more years of managerial experience.
Technical and credible leadership style; calm, decisive, and thoughtful under pressure.
Excellent verbal and written communication, including explaining technical concepts to business leaders and business concepts to the IT security workforce.
Regular employees must meet the role’s physical requirements, including independent mobility, computer interaction, and communication with peers and coworkers; reasonable accommodations are available.
Nice to have
Experience building or leading global, distributed, follow-the-sun, or hybrid 24x7 security operations and serving as incident commander for high-severity, business-impacting incidents.
Deep knowledge of SIEM, SOAR, EDR/XDR, cloud and identity telemetry, threat intelligence, threat hunting, digital forensics, detection engineering, vulnerability and exposure management, and security data platforms.
Experience with APIs, infrastructure-as-code, detection-as-code, runbook-as-code, AI/ML, or agent-enabled security workflows with human oversight.
Strong understanding of cloud platforms, operating systems, networking, application and product security, IAM, privileged access, key management, encryption, DLP, endpoint security, OT, and manufacturing environments.
Experience managing MSSP/MDR, penetration-testing, threat-intelligence, or other specialist security providers, including build-versus-buy decisions and service-performance governance.
CISSP, CCSP, CISM, GIAC, OSCP, OSCE, CREST, or equivalent practical expertise; familiarity with NIST CSF, MITRE ATT&CK, OWASP, CIS Controls, FDA cybersecurity expectations, EU regulatory requirements, and relevant privacy and resilience obligations.
Experience in medical devices, healthcare, life sciences, manufacturing, critical infrastructure, or another highly regulated and high-availability environment; connected products, IoT, mobile applications, product-cloud ecosystems, or software update channels are advantageous.
Experience operating through a carve-out, separation, major transformation, or transition-services exit, and standing up security capabilities from the ground up.
Culture & Benefits
Flexible workplace structure with virtual work locations.
Health, dental, and vision insurance, plus Health Savings Account and Healthcare Flexible Spending Account access.
Life insurance, long-term and short-term disability coverage, dependent daycare spending account, paid time off, and holidays.
401(k) plan with company match, employee incentive plans, Employee Stock Purchase Plan, Employee Assistance Program, and selected retirement and capital accumulation plans.
Equal employment opportunity and reasonable accommodations for qualified individuals with disabilities.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →