Cybersecurity Operations Analyst

THINK Surgical•Fremont, CA

13h•Onsite

About The Position

The Cybersecurity Operations Analyst supports and advances THINK Surgical’s cybersecurity program through security operations, incident response, vulnerability management, cybersecurity projects, compliance activities, AI governance, and data governance. The role helps protect systems, cloud services, endpoints, data, and emerging technologies while improving the organization’s cybersecurity maturity. Approximately 60% of the position focuses on cybersecurity operations, vulnerability management, incident response, compliance support, and security administration; approximately 40% focuses on cybersecurity projects, AI governance, data governance, and continuous security improvement. The position is based at THINK’s corporate office and works with IT, Engineering, Quality, Compliance, Regulatory, and business stakeholders. The analyst monitors and investigates security events, coordinates remediation, supports data protection and AI governance initiatives, and leads security improvement projects. The role also supports identity and access management, cybersecurity risk assessments, audits, vendor and customer security reviews, awareness initiatives, and the administration and improvement of security technologies. The position requires travel as business necessitates, up to 10%, and may involve work on weekends, holidays, or outside normal business hours.

Requirements

Bachelor’s degree in a relevant field or equivalent experience.
3–5 years of hands-on experience in cybersecurity, information security, or security-focused IT roles.
Experience investigating security events and coordinating remediation activities.
Experience managing vulnerability remediation efforts and security improvement initiatives.
Working knowledge of security operations, vulnerability management, incident response, identity and access management, endpoint security, and data protection and information security controls.
Familiarity with data classification, data governance, information protection, or DLP concepts.
Understanding of cybersecurity risks associated with cloud services, SaaS platforms, and emerging AI technologies.
Strong analytical, troubleshooting, documentation, project coordination, and communication skills.
Ability to independently manage multiple priorities and projects with limited supervision.

Nice To Haves

Experience in healthcare, medical device, biotechnology, manufacturing, or other regulated industries.
Experience supporting SOC 2, HIPAA, NIST Cybersecurity Framework, ISO 27001, ISO 13485, or FDA-regulated environments.
Experience with Microsoft 365 security technologies, including Defender, Entra ID, Intune, Conditional Access, and Purview.
Experience implementing or supporting data governance, data classification, information protection, or DLP programs.
Familiarity with AI governance, emerging technology risk management, or responsible AI practices.
One or more relevant cybersecurity certifications, such as Security+, CySA+, SSCP, GSEC, SC-200, AZ-500, CISSP, or Associate of ISC2.

Responsibilities

Monitor, triage, investigate, and respond to alerts from MDR, SIEM, endpoint protection, cloud security, and identity security platforms.
Conduct incident investigations, collect forensic evidence, analyze root causes, document findings, and coordinate containment, remediation, recovery, and communications.
Recommend improvements to security controls, monitoring, and response procedures; assist with threat hunting and maintain incident response documentation and playbooks.
Own the vulnerability management lifecycle, including identification, prioritization, remediation tracking, validation, risk acceptance, and reporting.
Coordinate vulnerability remediation with IT, Engineering, and system owners; facilitate vulnerability review meetings and report on remediation performance and trends.
Assist with security hardening across endpoints, servers, cloud services, applications, and network infrastructure.
Coordinate cybersecurity projects from planning through implementation and operational transition; develop project plans, timelines, status reports, risk registers, and implementation documentation.
Support deployment, optimization, evaluation, testing, and implementation of cybersecurity technologies and controls; coordinate with vendors, consultants, and service providers.
Identify opportunities to improve security controls, processes, automation, and cybersecurity maturity, and support cybersecurity roadmap initiatives.
Support identity and access management processes, including user provisioning, access reviews, privileged access management, conditional access, authentication controls, and identity-related event investigation and remediation.
Support identity governance, least privilege, and zero-trust initiatives.
Support the AI Governance Program through evaluation, monitoring, secure adoption, risk assessments, and security controls, standards, and policies for AI technologies and services.
Support data governance activities, including data inventory, classification, labeling, retention, protection, and lifecycle management; help identify and classify sensitive data.
Participate in implementing and administering DLP, data classification, information protection, and data labeling capabilities, including Microsoft Purview and other information protection technologies.
Monitor, report, and support remediation of data governance and information protection control issues.
Participate in cybersecurity risk assessments and remediation planning; maintain cybersecurity policies, standards, procedures, technical documentation, and operational artifacts.
Support quarterly IT General Controls reviews, access reviews, evidence collection, remediation tracking, SOC 2 audits, and other compliance, regulatory, and certification activities.
Assist with vendor security reviews, third-party risk assessments, customer due diligence, customer security questionnaires, and cybersecurity assessments.
Coordinate security awareness initiatives such as phishing simulations, employee training, policy communications, and effectiveness reporting; research threats and develop awareness materials.
Collaborate with cross-functional stakeholders, serve as a cybersecurity subject matter resource, present findings and metrics to management, and promote a security-conscious culture.
Work hands-on with enterprise cybersecurity technologies supporting security operations, incident response, identity and access management, endpoint security, vulnerability management, cloud security, data protection, and governance, risk, and compliance.