Provides cybersecurity advisory services for medical devices and software, including risk assessments, secure design and development guidance, HIPAA and ePHI compliance, audit support, security reporting, and product documentation. Partners with cross-functional development and product teams, monitors threats, and supports vulnerability scanning, SAST, SCA, DAST, penetration testing, and application security procedures.
Mirion is seeking a motivated and enthusiastic Senior Product Cybersecurity Specialist to support Mirion’s medical and technologies product lines. The specialist will play a crucial role providing cybersecurity advisory services and HIPPA guidance to product owners, sales teams, and developers in the form of providing security guidance, reviews, and compliance information. Additionally, this role will build out processes and technical capabilities as assigned to support the Product Cybersecurity mission.
Primary Responsibilities
- Support cybersecurity risk assessments for connected medical devices and software per US HHS and FDA guidance.
- Provide cybersecurity recommendations and guidance to product development teams on secure design, coding, and development.
- Assist with gathering evidence and providing information for external audits and customer security inquiries for HIPPA and ePHI related security controls and for frameworks such as ISO 27001 and SOC 2.
- Document and write product risk assessment and security control reports.
- Review and aid with writing cybersecurity related information for product documentation.
- Participate in product project meetings as the cybersecurity representative.
- Collaborate with cross-functional teams to ensure cybersecurity best practices are integrated into product development and support.
- Stay informed about the latest cybersecurity threats, vulnerabilities, and industry’s best practices.
Potential Additional Responsibilities
- Participate in routine code vulnerability scans and triage activities.
- Assist in implementation and creating procedures around the use of developer code security technologies including SAST, SCA, and DAST tools.
- Coordinating penetration testing and other application security testing.
- Other general tasks as assigned.
Required Qualifications and Experience
- Bachelor’s degree in information technology, information security, or related field or equivalent practical experience.
- Experience: 4+ years in a cybersecurity-focused role, with exposure to cybersecurity governance, risk, and compliance.
- Working knowledge of the HIPAA Security Rule (45 CFP Part 160/164) and Privacy/Breach Notification Rules.
- Familiarity with FDA's "Cybersecurity in Medical Devices" premarket/postmarket guidance.
- Familiarity with cybersecurity frameworks such as ISO 27001, IEC 62443, NIST 800-171, SOC 2, and Cyber Essentials.
- Experience with HIPPA regulations and the HITRUST security framework.
- Experience with software application architecture and secure software development practices.
- Experience with embedded systems and associated security considerations.
- Good understanding of cybersecurity concepts and best practices to secure hardware and software components.
- Strong communication skills and a collaborative working style.
- Desire to work and learn.
Desired Qualifications and Experience
- Familiarity with international cyber industry regulations such as EU GDPR, and EU Cyber Resilience Act.
- Understanding of SBOM concepts and code/application vulnerability management tools.
- Experience with secure coding practices.
- Experience with Azure and AWS cloud security.
Mirion Technologies Irvine, California, USA Office
Irvine, United States
Similar Jobs
Artificial Intelligence • Cloud • Consumer Web • Productivity • Software • App development • Data Privacy
Runs scalable customer programs connecting product development and go-to-market teams. Responsibilities include recruiting and engaging customers for pre-PMF testing, coordinating cross-functional stakeholders, establishing operating infrastructure and readiness criteria, managing Customer Advisory Board activities, integrating customer testing into launch processes, and synthesizing feedback into product and GTM decisions.
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Lead enterprise customers through Moveworks software implementations, managing timelines, scope, budgets, risks, resources, governance, and stakeholder communication. Build and launch agentic workflows, support change management and adoption, resolve delivery issues, coordinate with sales, partners, product, and customer success teams, and ensure successful transition to post-launch support.
Top Skills:
Agentic AiLarge Language Models (Llms)MoveworksSaaSServicenow
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Leads enterprise Moveworks implementations from planning through launch, managing scope, budgets, timelines, risks, resources, governance, and change management. Partners with customers, sales, services partners, product, and customer success teams to align solutions with business goals, drive adoption, resolve issues, and deliver agentic AI workflows that create measurable value.
Top Skills:
Agentic AiLarge Language Models (Llms)MoveworksSaaSServicenow
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
