Cybersecurity Analyst, Imperative Care
$100-120k
+ Bonus & stock options
Office located in Campbell, CA
Stroke intervention & treatment technology
Be an early applicant
Stroke intervention & treatment technology
201-500 employees
Be an early applicant
$100-120k
+ Bonus & stock options
Office located in Campbell, CA
201-500 employees
Company mission
Imperative Care is addressing gaps across the entire patient journey — from detection through recovery — to elevate care for patients suffering from stroke and other devastating vascular diseases.
Role
Who you are
- Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related discipline required, and a minimum of one year hands-on cybersecurity experience with expertise in security operations, incident response, endpoint security, SIEM, vulnerability management; or an equivalent combination of education and experience
- Demonstrated experience with CrowdStrike Falcon administration and/or Rapid7 InsightIDR platforms, or comparable enterprise EDR, or SIEM. This experience includes onboarding log sources, developing and tuning detections, managing policies and sensors, and conducting investigations; direct experience with both platforms strongly preferred
- Experience securing Windows, macOS, and Linux endpoints and applying hardening baselines, patching, encryption, privilege-management, and endpoint-management controls
- Working knowledge of network, cloud, and identity security fundamentals, including TCP/IP, DNS, IAM, multifactor authentication, single sign-on, privileged access, firewalls, and secure logging
- Experience with threat hunting, incident response, vulnerability scanning, risk-based remediation, penetration-test coordination, and validation of corrective actions
- Experience supporting the development of security policies and procedures and delivering security awareness training and phishing simulations to a broad employee population
- Familiarity with NIST Cybersecurity Framework, CIS Controls and Benchmarks, MITRE ATT&CK, and common security operations and incident response practices
- Experience supporting SOC 2 readiness or attestation, including control implementation, evidence collection, audit coordination, and remediation, preferred
- Experience in medical devices, life sciences, healthcare, or another regulated industry strongly preferred
- Experience with connected medical devices, IoT sensors, or product security - including FDA cybersecurity expectations, threat modeling, SBOMs, secure update and patching practices, and product vulnerability disclosure - is a plus
- Relevant security certifications and scripting or automation experience with PowerShell, Python, or similar tools preferred
What the job involves
- The Cybersecurity Analyst II is responsible for strengthening Imperative Care's enterprise cybersecurity posture across endpoints, cloud services, networks, applications, and third-party environments
- This role monitors and responds to security events, administers CrowdStrike endpoint detection and response (EDR), and Rapid7 security information and event management (SIEM) capabilities, drives endpoint hardening and vulnerability remediation, and delivers employee security awareness programs
- Working cross-functionally with Information Technology, Quality, Regulatory, Legal, Engineering, and business teams, the analyst supports incident response, penetration testing, security policy development, audit readiness, and risk reduction activities in a regulated medical technology environment
- Monitor, triage, investigate, and respond to security alerts from Rapid7 SIEM, CrowdStrike EDR, cloud, identity, network, and endpoint telemetry sources
- Lead or coordinate incident response activities, including validation, containment, eradication, recovery, root-cause analysis, evidence preservation, and post-incident reporting
- Maintain and test incident response playbooks, escalation procedures, communications, and tabletop exercises; participate in after-hours response when needed
- Administer and optimize CrowdStrike Falcon, including sensor health, prevention policies, detections, exclusions, endpoint isolation, and response workflows
- Administer and continuously improve Rapid7 SIEM, including log-source onboarding, parsing, dashboards, use cases, correlation rules, alert tuning, retention, and event investigations
- Define and enforce security baselines for Windows, macOS, and Linux endpoints, including patching, encryption, local privilege, application controls, secure configuration, and device hygiene
- Conduct threat hunting across accounts, endpoints, and network segments; incorporate relevant threat intelligence and MITRE ATT&CK techniques into defensive operations
- Perform vulnerability assessments and risk-based prioritization; partner with system owners to remediate findings, verify closure, document exceptions, and report remediation metrics and trends
- Coordinate internal and third-party penetration testing, scope testing activities, evaluate findings, and drive remediation to closure
- Design, deliver, and track semiannual security awareness training, phishing simulations, policy refreshers, and role-based materials; serve as a resource for employee security questions
Our take
Strokes pose a real and present threat to millions of people around the world, but many needs in stroke care are still not being met. Imperative Care is setting out to change this by developing innovative solutions for preventing and treating strokes.
Imperative Care was founded by an expert neuroendovascular surgeon and a serial entrepreneur, and its forward-facing technology and ambitious growth are testament to this partnership. Imperative has maintained a strong focus on physician-led care, developing its technology in close collaboration with working doctors. This has helped the company to identify and address key pain points in the existing stroke care system.
Imperative Care has scaled relatively quickly since it first launched, and this is a result of its rapid innovation cycle and its considerable funding success. Investment awarded to Imperative in 2024 will fuel its growth and product development in the coming years.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
21% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Mar 2026
$100m
CONVERTIBLE
Jul 2024
$150m
SERIES E
Total funding: $598m
Company benefits
- Stock options
- 401k
- Health benefits
- Team events, competitions & activities
Company HQ
Campbell, CA
Leadership
Fred Khosravi
(Chairman & CEO)Was Senior Product Development Engineer at Alcon, and Product Development Manager at Focal Therapeutics. Is currently Director of Instylla Medical.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 7 more jobs at Imperative Care