Senior Cybersecurity Engineer, Q Bio
Software as a Medical Device/Healthcare/Medical Technology
$170-200k
Quantitative biology for preventive care
Job no longer available
Quantitative biology for preventive care
21-100 employees
Job no longer available
$170-200k
21-100 employees
Company mission
To make a comprehensive longitudinal exam — measurable, comparable, physician-reviewed — at the scale premium care providers expect.
Role
Who you are
- 5+ years of experience in cybersecurity, with at least 3-5 years in a hands-on, senior or lead role
- Proven experience in a regulated industry, with a strong preference for MedTech (medical devices), HealthTech, or Life Sciences
- FDA Expertise: Demonstrated, hands-on experience with FDA cybersecurity guidance for medical devices, contributing to the cybersecurity sections of regulatory submissions (e.g., 510(k), PMA), and acting as a subject matter expert in direct interactions with regulatory bodies (e.g., responding to submission questions, participating in audits)
- Compliance Expertise: Direct experience leading or playing a primary role in achieving and maintaining SOC 2 and/or HIPAA compliance
- Product Security: Strong experience with application security, secure SDLC practices, threat modeling (e.g., STRIDE), and vulnerability management for software products
- Cloud Security: Deep knowledge of securing cloud environments and services (AWS, GCP, or Azure)
- Technical Skills: Proficiency with security assessment tools, IAM systems, endpoint protection, and network security concepts
- Bachelor's degree in Computer Science, Information Security, or a related field
- Relevant professional certifications are highly desirable (e.g., CISSP, CISM, HCISPP, CSSLP)
What the job involves
- We are hiring a Senior Cybersecurity Engineer to join our dynamic team, focusing on embedding security throughout our product lifecycle
- You will be instrumental in designing, building, automating, and maintaining the secure deployment and monitoring of our cutting-edge products
- Secure Software Development Lifecycle (SDLC): Integrate security best practices and tools into every phase of the product development lifecycle, from design and requirements to coding, testing, and deployment
- Threat Modeling & Risk Analysis: Lead and perform threat modeling and security risk analysis (per ISO 14971) for new and existing medical device software
- FDA & Regulatory Compliance: Author, review, and own all cybersecurity-related documentation for regulatory submissions (e.g., FDA 510(k) pre-market and post-market management plans). Ensure our products and processes align with the latest FDA guidance, IEC 62304, and other relevant medical device security standards
- Regulatory Interface: Serve as the primary cybersecurity subject matter expert (SME) for regulatory interactions, including responding to questions during FDA submissions and representing the company's cybersecurity posture during audits
- Security Requirements Definition: Partner with Product Management, Engineering, and Quality teams to define and document security requirements, controls, and architecture for our medical device platforms
- Vulnerability Management & Penetration Testing: Manage and coordinate third-party penetration testing and internal vulnerability assessments of our products. Develop and oversee the remediation action plan
- Incident Response: Develop, implement, and maintain an incident response plan for product-related security events, including vulnerability disclosure policies
- Continuous Security Assessment & Strategy: Continuously assess the company's security posture against evolving business needs and emerging threats. Identify relevant security standards (e.g., SOC 2, HIPAA, NIST CSF), perform regular gap analyses, and own the strategic roadmap for assessment, implementation, and improvement
- Compliance Frameworks (SOC 2 / HIPAA): Lead the initiative to achieve and maintain SOC 2 certification for our platform and business operations. Develop and manage the security controls and policies required for SOC 2 and HIPAA Security Rule compliance
- Corporate Security Governance: Develop, implement, and enforce company-wide information security policies, procedures, and standards
- IT & Cloud Security: Conduct security architecture reviews and risk assessments of our corporate IT and cloud infrastructure (AWS/GCP/Azure). Implement and manage security controls to protect corporate data and systems
- Vendor & Third-Party Risk Management: Establish and manage a program to assess and monitor the security posture of third-party vendors and partners
- Identity & Access Management (IAM): Oversee and improve the company's IAM policies and solutions to ensure the principle of least privilege is maintained
Our take
The health tracking market has attracted significant interest from millions of Americans, yet current solutions lack depth and personalization. Many existing software and hardware options rely on manual data entry or offer limited functionality through wearables, failing to address the intricate data of individual bodies. This creates a demand for more innovative and comprehensive health monitoring tools.
Q Bio is addressing the gap by developing advanced healthcare hardware and software that tracks and analyzes individual bodily data to create a 'digital twin'. This concept provides users with a real-time representation of their health, enabling them to monitor changes over time and gain valuable insights to inform their healthcare decisions.
The company sets itself apart from other health-tracking services with its combined focus on granular detail and long-term monitoring. By visualizing data as 'digital twins', Q Bio makes complex health metrics more relatable and understandable, enhancing user engagement and empowering individuals to take control of their health in a meaningful way.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (2 rounds)
Jul 2024
$27m
LATE VC
Mar 2020
$40m
SERIES B
Total funding: $67m
Company HQ
San Carlos, CA
Leadership
Dr. Garry Choy
(Co-Founder & Chief Medical Officer)Alongside Q Bio, they have also worked at UnitedHealth Group since 2019, initially as a Senior Vice President and Deputy Chief Medical Officer, they now served as the Chief Clinical Transformation Officer. They are also the co-founder of andros where they have served as the Chief Medical Officer and Com0pliance Officer since 2013.
Jeffrey Brewer
(CEO & President)Prior to joining Q Bio in 2024, Jeffrey was a Divisional VP of Connected Systems at Abbot. Before that, they co-founded Bigfoot Biomedical where they served as the CEO.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job