Technical Product Security Manager

Itamar

At ZOLL, we're passionate about improving patient outcomes and helping save lives. We provide innovative technologies that make a meaningful difference in people's lives. Our medical devices, software and related services are used worldwide to diagnose and treat patients suffering from serious cardiopulmonary and respiratory conditions.

ZOLL Itamar is an innovative medical device technology company that focuses on the development and manufacturing of Home Sleep Apnea Tests to aid in the diagnosis of respiratory sleep disorders. Our core product is the WatchPAT®️ family, a revolutionary FDA-cleared portable home sleep apnea test device, that is based on proprietary signal and analysis. 80% of patients who have sleep apnea are undiagnosed. We are committed to reach those undiagnosed patients and provide testing to promote wellness and enhance overall quality of life. WatchPAT®️ is commercially available within major markets including the U.S., Japan, and Europe, and is the leading home sleep apnea test in the US. ZOLL Itamar's corporate headquarters, research and development and manufacturing are located in Israel with U.S. headquarters based in Atlanta, GA.

Job Type

Hybrid

Job Summary

We are looking for a Product Security Manager to lead product security activities across our software, cloud, and medical device environments.

The role requires a strong technical security background, hands-on

understanding of software and cloud systems, and the ability to work closely with Engineering, DevOps, CloudOps, QA/RA, IT, and Compliance teams. The Product Security Manager will drive vulnerability management, security

hardening, audit readiness, and security activities related to FDA submissions, FedRAMP, customer reviews, and other compliance requirements.

Essential Functions

• Lead product security activities across applications, cloud services,
• infrastructure, and development processes.
• Support FDA, FedRAMP, customer audits, and other security compliance activities.
• Manage vulnerability review, CVE impact assessment, remediation tracking, and risk acceptance.
• Work with SBOM/BOM data, third-party components, open-source dependencies, and security scan results.
• Drive security hardening initiatives across products, environments, endpoints, and CI/CD pipelines.
• Partner with Engineering, DevOps, CloudOps, QA/RA, IT, and Security to identify gaps and ensure remediation.
• Support threat modeling, risk assessments, secure configuration reviews, and control validation.
• Prepare security evidence, procedures, guidelines, and technical summaries when needed.
• Track security action items, dependencies, timelines, and deliverables across teams.
  
  

• B.Sc. in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience.
• 3-5 years of experience in product security, application security, DevSecOps, cloud security, infrastructure security, or technical security program management.
• Strong understanding of software development, cloud environments, CI/CD, operating systems, networking, and common security controls.
• Experience with vulnerability management, CVE analysis, remediation tracking, and security risk assessment.
• Experience working with engineering, DevOps, cloud, IT, or QA/RA teams on security improvements and remediation.
• Familiarity with security standards or regulatory frameworks such as FDA cybersecurity guidance, FedRAMP, NIST, ISO 27001, SOC 2, HIPAA, GDPR, or similar frameworks.
• Experience with medical device software, healthcare systems, SaaS products, or regulated environments. preferred
• Experience supporting FDA submissions, FedRAMP activities, customer security reviews, or formal audits. preferred
• Experience with SAST, DAST, SCA, container scanning, cloud security tools, endpoint security tools, and ticketing systems. preferred
• Experience with AWS security services, IAM, encryption, logging, monitoring, and network segmentation. preferred
• Experience with Kubernetes, Docker, CI/CD pipelines, and Infrastructure as Code. preferred
  
  

• Ability to understand security tool outputs, SBOMs, dependency scans, penetration test reports, and audit findings.
• Strong project management and cross-functional coordination skills.
• Excellent communication skills and ability to work with technical and non-technical stakeholders.
  
  

• Hebrew - Expert
• English - Expert