Cybersecurity Operations Analyst

THINK Surgical, Inc.•Fremont, CA

1d•$130,000 - $145,000•Onsite

About The Position

The Cybersecurity Operations Analyst supports and advances THINK Surgical’s cybersecurity program through security operations, incident response, vulnerability management, cybersecurity projects, compliance activities, AI governance, and data governance. The role helps protect systems, cloud services, endpoints, data, and emerging technologies while contributing to continuous improvement of the organization’s cybersecurity maturity. Approximately 60% of the position focuses on cybersecurity operations, vulnerability management, incident response, compliance support, and security administration; approximately 40% focuses on cybersecurity projects, AI governance, data governance, and security improvement. The position is based at THINK’s corporate office. The analyst investigates security events, coordinates remediation, supports data protection initiatives, contributes to AI governance, and leads security improvement projects in collaboration with IT, Engineering, Quality, Compliance, and business stakeholders. The role involves hands-on work with enterprise cybersecurity technologies supporting operations, incident response, identity and access management, endpoint security, vulnerability management, cloud security, data protection, and governance, risk, and compliance activities. The position also supports risk assessments, audits, customer security reviews, employee security awareness, and the development and maintenance of security documentation. It requires cross-functional collaboration, clear communication of security findings and risks to management, and independent management of multiple priorities. The role may require work on weekends, holidays, or outside normal business hours, as well as business-related travel of up to 10%.

Requirements

Bachelor’s degree in a relevant field or equivalent experience.
3–5 years of hands-on experience in cybersecurity, information security, or security-focused IT roles.
Experience investigating security events and coordinating remediation activities.
Experience managing vulnerability remediation efforts and security improvement initiatives.
Working knowledge of security operations, vulnerability management, incident response, identity and access management, endpoint security, and data protection and information security controls.
Familiarity with data classification, data governance, information protection, or DLP concepts.
Understanding of cybersecurity risks associated with cloud services, SaaS platforms, and emerging AI technologies.
Strong analytical, troubleshooting, documentation, project coordination, and communication skills.
Ability to independently manage multiple priorities and projects with limited supervision.
Ability to remain stationary and operate office equipment for prolonged periods; perform constant manual dexterity, move about the work site, and handle objects weighing up to 20 lbs.
Ability to occasionally position oneself to complete assigned tasks, ascend or descend floors or ladders, and work around moving mechanical parts.
Ability to travel as business necessitates, up to 10%.

Nice To Haves

Experience in healthcare, medical device, biotechnology, manufacturing, or another regulated industry.
Experience supporting SOC 2, HIPAA, NIST Cybersecurity Framework, ISO 27001, ISO 13485, or FDA-regulated environments.
Experience with Microsoft 365 security technologies, including Defender, Entra ID, Intune, Conditional Access, and Purview.
Experience implementing or supporting data governance, data classification, information protection, or DLP programs.
Familiarity with AI governance, emerging technology risk management, or responsible AI practices.
One or more relevant cybersecurity certifications, such as Security+, CySA+, SSCP, GSEC, SC-200, AZ-500, CISSP, or Associate of ISC2.

Responsibilities

Monitor, triage, investigate, and respond to alerts from MDR, SIEM, endpoint protection, cloud security, and identity security platforms.
Investigate incidents, collect forensic evidence, analyze root causes, document findings, and coordinate containment, remediation, recovery, and communications.
Recommend improvements to security controls, monitoring, and incident response procedures; assist with threat hunting and maintain incident response documentation and playbooks.
Manage the vulnerability lifecycle, including identification, prioritization, remediation tracking, validation, risk acceptance, and reporting.
Coordinate vulnerability remediation with IT, Engineering, and system owners; facilitate review meetings, track performance, analyze trends, and recommend risk-based actions.
Assist with security hardening across endpoints, servers, cloud services, applications, and network infrastructure.
Coordinate cybersecurity projects from planning through implementation and operational transition; develop project plans, timelines, status reports, risk registers, and documentation.
Support deployment, optimization, evaluation, and testing of cybersecurity technologies and controls, and coordinate with vendors, consultants, and service providers.
Identify opportunities to improve security controls, operations, automation, and cybersecurity maturity; support roadmap and continuous improvement initiatives.
Support identity and access management processes, including provisioning, access reviews, privileged access management, conditional access, and authentication controls.
Investigate and remediate identity-related risks and events, and contribute to identity governance, least privilege, and zero-trust initiatives.
Support AI governance by evaluating and monitoring AI technologies and services, reviewing AI use cases and vendors, and helping develop responsible-use controls, standards, and policies.
Support data governance activities including data inventory, classification, labeling, retention, protection, and lifecycle management.
Collaborate with stakeholders to identify and classify sensitive corporate, customer, employee, financial, and regulated data.
Participate in implementation and administration of DLP, data classification, information protection, and data labeling capabilities, including Microsoft Purview and other technologies.
Monitor, report, and support remediation of data governance and information protection control issues.
Participate in cybersecurity risk assessments and remediation planning; maintain policies, standards, procedures, technical documentation, and operational artifacts.
Support quarterly IT General Controls reviews, access reviews, evidence collection, remediation tracking, SOC 2 audits, and other compliance, regulatory, and certification activities.
Assist with vendor security reviews, third-party risk assessments, customer due diligence, and customer security questionnaires and assessments.
Coordinate security awareness initiatives, including phishing simulations, employee training, policy communications, and effectiveness reporting.
Research emerging cyber threats, attack trends, and applicable security practices; assist with awareness materials and educational content.
Work cross-functionally with IT, Engineering, Quality, Regulatory, Compliance, and business stakeholders; provide cybersecurity subject matter support.
Present security findings, project updates, risk summaries, remediation status, and metrics to management, and promote a security-conscious culture.
Travel as business necessitates, up to 10%.
Work a schedule commensurate with business operations, including weekends, holidays, or times outside normal business hours.