Technical Product Security Manager (Medical Devices)

Location: Hybrid in Herzliya, Israel

Company

ZOLL Itamar develops and manufactures WatchPAT home sleep apnea testing devices and related software for the diagnosis of respiratory sleep disorders.

What you will do

• Lead product security activities across applications, cloud services, infrastructure, medical device environments, and development processes.
• Manage vulnerability reviews, CVE impact assessments, remediation tracking, risk acceptance, SBOMs, dependencies, and security scan results.
• Drive security hardening across products, endpoints, environments, and CI/CD pipelines.
• Partner with Engineering, DevOps, CloudOps, QA/RA, IT, Security, and Compliance to identify gaps and complete remediation.
• Support threat modeling, risk assessments, secure configuration reviews, control validation, and audit readiness.
• Prepare security evidence, procedures, guidelines, technical summaries, and cross-functional action plans.

Requirements

• B.Sc. in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience.
• 3–5 years of experience in product security, application security, DevSecOps, cloud security, infrastructure security, or technical security program management.
• Strong understanding of software development, cloud environments, CI/CD, operating systems, networking, and common security controls.
• Experience with vulnerability management, CVE analysis, remediation tracking, security risk assessment, and security tool outputs.
• Ability to coordinate with technical and non-technical stakeholders and manage security projects and deliverables.
• Expert Hebrew and English language skills are listed as preferred languages.

Nice to have

• Experience with medical device software, healthcare systems, SaaS products, or other regulated environments.
• Experience supporting FDA submissions, FedRAMP activities, customer security reviews, or formal audits.
• Experience with SAST, DAST, SCA, container scanning, cloud and endpoint security tools, and ticketing systems.
• Experience with AWS security services, IAM, encryption, logging, monitoring, network segmentation, Kubernetes, Docker, and Infrastructure as Code.

Culture & Benefits

• Work in a fast-growing medical technology company operating in more than 140 countries.
• Contribute to technologies intended to improve outcomes for patients with cardiopulmonary and respiratory conditions.
• Culture focused on innovation, self-motivation, and an entrepreneurial spirit.