Monitor and respond to security alerts across endpoints, cloud, identity, and network; administer CrowdStrike and Rapid7 SIEM; lead incident response and threat hunting; enforce endpoint hardening and vulnerability remediation; coordinate penetration testing; and deliver security awareness programs in a regulated medical device environment.
Title: Cybersecurity Analyst II
Location: This position is based in our Campbell, California offices. This position is on-site, full-time
Why Imperative Care?
Do you want to make a real impact on patients? Imperative Care is changing the way stroke and vascular diseases are treated. As part of our team, you’d be developing breakthroughs that will revolutionize the future of stroke care. Every day, the technologies that we develop at Imperative Care directly impact human lives. Our focus is on the needs of the patient, and they come first in everything we do.
What You’ll Do
The Cybersecurity Analyst II is responsible for strengthening Imperative Care's enterprise cybersecurity posture across endpoints, cloud services, networks, applications, and third-party environments. This role monitors and responds to security events, administers CrowdStrike endpoint detection and response (EDR), and Rapid7 security information and event management (SIEM) capabilities, drives endpoint hardening and vulnerability remediation, and delivers employee security awareness programs. Working cross-functionally with Information Technology, Quality, Regulatory, Legal, Engineering, and business teams, the analyst supports incident response, penetration testing, security policy development, audit readiness, and risk reduction activities in a regulated medical technology environment.
What You’ll Bring
Employee Benefits include a stake in our collective success with stock options, bonus, competitive salaries, a 401k plan, health benefits, generous PTO, and a parental leave program.
Salary Range: $100,000 – 120,000/ annually
Please note that the salary information is a general guideline only. Imperative Care considers factors such as scope and responsibilities of the position, candidate's work experience, education/training, key skills, and internal equity, as well as location, market and business considerations when extending an offer.
Join Us! Apply Today
Location: This position is based in our Campbell, California offices. This position is on-site, full-time
Why Imperative Care?
Do you want to make a real impact on patients? Imperative Care is changing the way stroke and vascular diseases are treated. As part of our team, you’d be developing breakthroughs that will revolutionize the future of stroke care. Every day, the technologies that we develop at Imperative Care directly impact human lives. Our focus is on the needs of the patient, and they come first in everything we do.
What You’ll Do
The Cybersecurity Analyst II is responsible for strengthening Imperative Care's enterprise cybersecurity posture across endpoints, cloud services, networks, applications, and third-party environments. This role monitors and responds to security events, administers CrowdStrike endpoint detection and response (EDR), and Rapid7 security information and event management (SIEM) capabilities, drives endpoint hardening and vulnerability remediation, and delivers employee security awareness programs. Working cross-functionally with Information Technology, Quality, Regulatory, Legal, Engineering, and business teams, the analyst supports incident response, penetration testing, security policy development, audit readiness, and risk reduction activities in a regulated medical technology environment.
- Monitor, triage, investigate, and respond to security alerts from Rapid7 SIEM, CrowdStrike EDR, cloud, identity, network, and endpoint telemetry sources.
- Lead or coordinate incident response activities, including validation, containment, eradication, recovery, root-cause analysis, evidence preservation, and post-incident reporting.
- Maintain and test incident response playbooks, escalation procedures, communications, and tabletop exercises; participate in after-hours response when needed.
- Administer and optimize CrowdStrike Falcon, including sensor health, prevention policies, detections, exclusions, endpoint isolation, and response workflows.
- Administer and continuously improve Rapid7 SIEM, including log-source onboarding, parsing, dashboards, use cases, correlation rules, alert tuning, retention, and event investigations.
- Define and enforce security baselines for Windows, macOS, and Linux endpoints, including patching, encryption, local privilege, application controls, secure configuration, and device hygiene.
- Conduct threat hunting across accounts, endpoints, and network segments; incorporate relevant threat intelligence and MITRE ATT&CK techniques into defensive operations.
- Perform vulnerability assessments and risk-based prioritization; partner with system owners to remediate findings, verify closure, document exceptions, and report remediation metrics and trends.
- Coordinate internal and third-party penetration testing, scope testing activities, evaluate findings, and drive remediation to closure.
- Design, deliver, and track semiannual security awareness training, phishing simulations, policy refreshers, and role-based materials; serve as a resource for employee security questions.
What You’ll Bring
- Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related discipline required, and a minimum of one year hands-on cybersecurity experience with expertise in security operations, incident response, endpoint security, SIEM, vulnerability management; or an equivalent combination of education and experience.
- Demonstrated experience with CrowdStrike Falcon administration and/or Rapid7 InsightIDR platforms, or comparable enterprise EDR, or SIEM. This experience includes onboarding log sources, developing and tuning detections, managing policies and sensors, and conducting investigations; direct experience with both platforms strongly preferred.
- Experience securing Windows, macOS, and Linux endpoints and applying hardening baselines, patching, encryption, privilege-management, and endpoint-management controls.
- Working knowledge of network, cloud, and identity security fundamentals, including TCP/IP, DNS, IAM, multifactor authentication, single sign-on, privileged access, firewalls, and secure logging.
- Experience with threat hunting, incident response, vulnerability scanning, risk-based remediation, penetration-test coordination, and validation of corrective actions.
- Experience supporting the development of security policies and procedures and delivering security awareness training and phishing simulations to a broad employee population.
- Familiarity with NIST Cybersecurity Framework, CIS Controls and Benchmarks, MITRE ATT&CK, and common security operations and incident response practices.
- Experience supporting SOC 2 readiness or attestation, including control implementation, evidence collection, audit coordination, and remediation, preferred.
- Experience in medical devices, life sciences, healthcare, or another regulated industry strongly preferred.
- Experience with connected medical devices, IoT sensors, or product security - including FDA cybersecurity expectations, threat modeling, SBOMs, secure update and patching practices, and product vulnerability disclosure - is a plus.
- Relevant security certifications and scripting or automation experience with PowerShell, Python, or similar tools preferred.
Employee Benefits include a stake in our collective success with stock options, bonus, competitive salaries, a 401k plan, health benefits, generous PTO, and a parental leave program.
Salary Range: $100,000 – 120,000/ annually
Please note that the salary information is a general guideline only. Imperative Care considers factors such as scope and responsibilities of the position, candidate's work experience, education/training, key skills, and internal equity, as well as location, market and business considerations when extending an offer.
Join Us! Apply Today
Similar Jobs
Professional Services
Lead and execute incident response for DoD directives, conduct forensic investigations, perform post-incident reviews, maintain IR SOPs to NIST/DISA guidance, manage enterprise monitoring/logging, produce leadership reports, and support remediation and capability improvements while providing after-hours investigative support.
Top Skills:
BeyondtrustCapD3FendDisa GuidelinesGiapMicrosoft Defender EndpointMitre Att&CkNist Sp 800-61PpsmSnapSplunkStigsTaniumTrellix/Ess
Hardware
Monitor, triage, investigate, and respond to security alerts across endpoints, cloud, and networks. Administer SOC tools (EDR/XDR, SIEM, Azure Sentinel), assist containment and remediation, tune detections, support compliance (CMMC, NIST 800-171, DFARS), and collaborate with IT and engineering to improve security posture.
Top Skills:
Ai And Llm ToolsApp Allow/Block-Listing ToolsAzure SentinelBashCloudCrowdstrikeDigital ForensicsEdrLinuxmacOSMicrosoft Gcc HighMitre Att&CkMsspPamPimPowershellPythonSIEMWindowsXdr
Hardware
Monitor, triage, investigate, and respond to security alerts across endpoints, cloud, and networks. Administer SOC tools (EDR/XDR, SIEM, Azure Sentinel), support incident response, threat hunting, detection rule tuning, vulnerability tracking, compliance (CMMC, NIST 800-171, DFARS), and collaborate with IT and engineering to improve security posture.
Top Skills:
Ai And Llm ToolsApp Allow/Block-Listing ToolsAzure SentinelBashCloud EnvironmentsCrowdstrikeEdrLinuxmacOSMicrosoft Gcc HighMitre Att&CkPamPimPowershellPythonSIEMWindowsXdr
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
