{"id":2826348,"url":"https://alion.io/job/spectral-ai-cybersecurity-engineer","title":"Cybersecurity Engineer","company":{"id":4447653,"name":"Spectral Ai","domain":"spectral-ai.com","url":"https://alion.io/company/spectral-ai","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":82000,"max_usd":160000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":425},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CAPA","optional":false},{"name":"CWE","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Dependency-Check","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SBOM","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2025-12-11T20:10:00Z","employer_posted_date":"2025-12-11","last_verified_at":"2026-10-19T08:36:50Z","board_verified":true,"closed_at":null,"days_open":311,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":311},"description":"Position Summary: \nSpectral AI, Inc. (Spectral) is seeking a Cybersecurity Engineer to join our growing design and development team. The position is based in Dallas, Texas, with hybrid work flexibility in accordance with the Spectral Employee Handbook guidelines. The Cyber Security Engineer will support the design, development, and maintenance of secure medical device software systems, ensuring that cybersecurity controls are resilient and compliant with FDA regulations, international standards (e.g.. ANSI/AAMI SW 96:2003, IEC 62304, IEC 81001, ISO 14971, ISO 27001), and organizational security policies. The engineer will collaborate closely with Software Engineering, Hardware Engineering, Quality Assurance, Regulatory Affairs, Biomedical Engineering, Data Science, Systems Engineering, and IT internal teams to embed cybersecurity into design controls, risk management, regulatory submissions, and post-market surveillance activities.\nEssential Duties and Responsibilities:\nProduct Cybersecurity\nInstitute Security-by-Design practices throughout the entire lifecycle of the Spectral device software, AI models, firmware, and hardware.\nDevelop and maintain cybersecurity standard operating procedures (SOPs) and work instructions that support compliance with regulatory and security requirements in all target markets for Spectral products.\nSupport design reviews by providing security input and ensuring cybersecurity is integrated into design controls.\nCybersecurity Risk Management\nPerform cybersecurity risk assessments for medical device systems using structured methodologies (Threat Modeling, STRIDE, DREAD, Attack Trees, SBOM analysis).\nExecute and document risk evaluation aligned with AAMI TIR57, AAMI TIR97, FDA Premarket Cybersecurity Guidance, and ISO 14971.\nParticipate actively in Coordinated Vulnerability Disclosure (CVD) processes, working with internal team and vendors to ensure vulnerabilities are responsibly reported, remediated, and communicated in alignment with industry best practices.\nMaintain and periodically update cybersecurity documentation and supporting artifacts, including:Security risk assessment\nSecurity risk management reports\nThreat models\nCybersecurity requirements, testing, and traceability matrices in alignment with FDA guidance and IEC 81001\n\nSecure Software Development (IEC 81001 and IEC 62304)\nCollaborate with software engineers to implement secure coding practices and structured code review processes.\nEnsure correct implementation of security requirements, encryption standards, authentication and authorization controls, and security-relevant logging.\nEvaluate SOUP/OTS components for vulnerabilities, maintenance status, and compliance with FDA software bill of material (SBOM) requirements.\nSupport the creation and ongoing maintenance of SBOM (e.g. CycloneDX, SPDX) using automated tools such as HELM and Dependency-Check.\nVulnerability and Patch Management \nPerform vulnerability scanning across firmware, software, cloud services, Linux-based, and Windows-based cart devices.\nTriage and validate Common Vulnerabilities and Exposures (CVEs) relevant to device components, run-time environments, and third-party libraries.\nPrepare vulnerability mitigation plans and support development teams during remediation.\nSupport integration of security controls across local, handheld, and cloud-connected medical devices.\nPenetration Testing and Verification Support \nPrepare documentation, architecture diagrams, and accounts for test execution.\nTrack findings, analyze root causes, and support remediation verification.\nIncident Response and Monitoring\nAssist in establishing cybersecurity monitoring processes for fielded devices and cloud environments.\nInvestigate security anomalies and incidents, perform log analysis, and support corrective/preventive actions (CAPA). \nQualifications:\nRequired education and experience:\nBachelor’s degree or above in Computer Science, Cybersecurity, Electrical/Computer Engineering, or a related field.\n3-5 years of proven experience in cybersecurity engineering, ideally within medical devices, healthcare technology, regulated software, or other safety-critical systems.\nDemonstrated proficiency in technical writing, ensuring accurate, comprehensive, and well-structured documentation for software cybersecurity.\nKnowledge, Skills and Abilities:\nFDA Premarket Cybersecurity Guidance\nIEC 62304 Software Lifecycle\nAAMI TIR57 / TIR97\nOWASP Top 10, CWE, and secure coding principles\nFamiliarity with Transport Layer Security (TLS), certificate management, encryption protocols (e.g. AES, RSA), and authentication/authorization models.\nUnderstanding of cybersecurity vulnerabilities and FDA reporting requirements\nUnderstanding of Windows and Linux OS hardening, cloud security (AWS/Azure), and secure configuration.\nPreferred Qualifications\nExperience supporting FDA medical device submissions with cybersecurity documentation.\nHands-on experience with medical cart or handheld device security (Windows, Linux, embedded OS).\nExperience with cloud-connected medical systems (AWS IoT, secure APIs, VPN connections).\nCertifications such as Security+, CySA+, CISSP, GSEC, CEH, or industry equivalent. \nSoft Skills\nExcellent written and verbal communication skills in English.\nDetail-oriented, strong analytical and problem-solving skills.\nAbility to prepare quality cybersecurity documentation suitable for regulatory review.\nAbility to collaborate across functional teams such as engineering, QA/RA, hardware, and clinical teams.\nComfortable managing multiple concurrent security tasks.\nPhysical Requirements:\nProlonged periods of sitting at a desk and working on a computer.\nTravel:\nOccasional support during off-hours for security events or release deadlines\nEqual Employment Opportunity:\nSpectral AI, Inc. is an equal opportunity and affirmative action employer. All applicants will be considered for employment without regard to race, color, ancestry, national origin, sex, gender, sexual orientation, marital status, religion, age, disability, gender identity, results of genetic testing, protected veteran status, or any other characteristic protected by applicable federal, state, or local laws.","description_format":"text","description_chars":6199,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":true}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-18T22:53:46Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.149,"p_room":0.28,"age_days":311,"expected_fill_days":22,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/spectral-ai-cybersecurity-engineer","json_url":"https://alion.io/job/spectral-ai-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-19T11:54:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8525,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4447653},"rest":"https://alion.io/mcp/rest/get_company?id=4447653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fspectral-ai-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fspectral-ai-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fspectral-ai-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/spectral-ai-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fspectral-ai-cybersecurity-engineer"}]}