At ZOLL, we're passionate about improving patient outcomes and helping save lives. We provide innovative technologies that make a meaningful difference in people's lives. Our medical devices, software and related services are used worldwide to diagnose and treat patients suffering from serious cardiopulmonary and respiratory conditions.
ZOLL Itamar is an innovative medical device technology company that focuses on the development and manufacturing of Home Sleep Apnea Tests to aid in the diagnosis of respiratory sleep disorders. Our core product is the WatchPAT®️ family, a revolutionary FDA-cleared portable home sleep apnea test device, that is based on proprietary signal and analysis. 80% of patients who have sleep apnea are undiagnosed. We are committed to reach those undiagnosed patients and provide testing to promote wellness and enhance overall quality of life. WatchPAT®️ is commercially available within major markets including the U.S., Japan, and Europe, and is the leading home sleep apnea test in the US. ZOLL Itamar's corporate headquarters, research and development and manufacturing are located in Israel with U.S. headquarters based in Atlanta, GA.
Job Type
Hybrid
Job Summary
We are looking for a Product Security Manager to lead product security activities across our software, cloud, and medical device environments.
The role requires a strong technical security background, hands-on
understanding of software and cloud systems, and the ability to work closely with Engineering, DevOps, CloudOps, QA/RA, IT, and Compliance teams. The Product Security Manager will drive vulnerability management, security
hardening, audit readiness, and security activities related to FDA submissions, FedRAMP, customer reviews, and other compliance requirements.
Essential Functions
- Lead product security activities across applications, cloud services,
- infrastructure, and development processes.
- Support FDA, FedRAMP, customer audits, and other security compliance activities.
- Manage vulnerability review, CVE impact assessment, remediation tracking, and risk acceptance.
- Work with SBOM/BOM data, third-party components, open-source dependencies, and security scan results.
- Drive security hardening initiatives across products, environments, endpoints, and CI/CD pipelines.
- Partner with Engineering, DevOps, CloudOps, QA/RA, IT, and Security to identify gaps and ensure remediation.
- Support threat modeling, risk assessments, secure configuration reviews, and control validation.
- Prepare security evidence, procedures, guidelines, and technical summaries when needed.
- Track security action items, dependencies, timelines, and deliverables across teams.
Required/Preferred Education and Experience
- B.Sc. in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience.
- 3-5 years of experience in product security, application security, DevSecOps, cloud security, infrastructure security, or technical security program management.
- Strong understanding of software development, cloud environments, CI/CD, operating systems, networking, and common security controls.
- Experience with vulnerability management, CVE analysis, remediation tracking, and security risk assessment.
- Experience working with engineering, DevOps, cloud, IT, or QA/RA teams on security improvements and remediation.
- Familiarity with security standards or regulatory frameworks such as FDA cybersecurity guidance, FedRAMP, NIST, ISO 27001, SOC 2, HIPAA, GDPR, or similar frameworks.
- Experience with medical device software, healthcare systems, SaaS products, or regulated environments. preferred
- Experience supporting FDA submissions, FedRAMP activities, customer security
reviews, or formal audits. preferred - Experience with SAST, DAST, SCA, container scanning, cloud security tools, endpoint security tools, and ticketing systems. preferred
- Experience with AWS security services, IAM, encryption, logging, monitoring, and network segmentation. preferred
- Experience with Kubernetes, Docker, CI/CD pipelines, and Infrastructure as Code. preferred
Knowledge, Skills and Abilities
- Ability to understand security tool outputs, SBOMs, dependency scans, penetration test reports, and audit findings.
- Strong project management and cross-functional coordination skills.
- Excellent communication skills and ability to work with technical and non-technical stakeholders.
Preferred Languages
- Hebrew - Expert
- English - Expert
ZOLL is a fast-growing company that operates in more than 140 countries around the world. Our employees are inspired by a commitment to make a difference in patients' lives, and our culture values innovation, self-motivation and an entrepreneurial spirit. Join us in our efforts to improve outcomes for underserved patients suffering from critical cardiopulmonary conditions and help save more lives.
Skills Required
- B.Sc. in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience
- 3-5 years experience in product security, application security, DevSecOps, cloud security, infrastructure security, or technical security program management
- Strong understanding of software development, cloud environments, CI/CD, operating systems, networking, and common security controls
- Experience with vulnerability management, CVE analysis, remediation tracking, and security risk assessment
- Familiarity with security standards/regulatory frameworks (FDA cybersecurity guidance, FedRAMP, NIST, ISO 27001, SOC 2, HIPAA, GDPR)
- Experience with medical device software, healthcare systems, SaaS products, or regulated environments
- Experience supporting FDA submissions, FedRAMP activities, customer security reviews, or formal audits
- Experience with SAST, DAST, SCA, container scanning, cloud security tools, endpoint security tools, and ticketing systems
- Experience with AWS security services, IAM, encryption, logging, monitoring, and network segmentation
- Experience with Kubernetes, Docker, CI/CD pipelines, and Infrastructure as Code
- Ability to interpret security tool outputs, SBOMs, dependency scans, penetration test reports, and audit findings
- Strong project management and cross-functional coordination skills; excellent communication with technical and non-technical stakeholders
- Hebrew - Expert; English - Expert
ZOLL Medical Corporation Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ZOLL Medical Corporation and has not been reviewed or approved by ZOLL Medical Corporation.
-
Healthcare Strength — Medical, dental, and vision coverage includes in‑network preventive care at 100% along with behavioral health/EAP and virtual therapy options. These features are often regarded as solid to good components of the package.
-
Parental & Family Support — Paid parental leave provides 12 weeks at full pay for the birthing parent and 6 weeks for the non‑birthing parent after eligibility is met. This policy is frequently highlighted as a standout element.
-
Wellbeing & Lifestyle Benefits — Wellness programs offer incentives and are complemented by multiple external well‑being recognitions. These programs add perceived value to total rewards.
ZOLL Medical Corporation Insights
What We Do
ZOLL Medical Corporation, an Asahi Kasei Group Company, develops and markets medical devices and software solutions that help advance emergency care and save lives, while increasing clinical and operational efficiencies. With products for defibrillation and monitoring, circulation and CPR feedback, data management, therapeutic temperature management, and ventilation, ZOLL provides a comprehensive set of technologies that help clinicians, EMS and fire professionals, and lay rescuers treat victims needing resuscitation and acute critical care. The Asahi Kasei Group is a diversified group of companies led by holding company Asahi Kasei Corp., with operations in the material, homes, and health care business sectors. Its health care operations include devices and systems for acute critical care, dialysis, therapeutic apheresis, transfusion, and manufacture of biotherapeutics, as well as pharmaceuticals and diagnostic reagents. With more than 30,000 employees around the world, the Asahi Kasei Group serves customers in more than 100 countries.
