Program Manager (R&D Cyber)

Description:

Program Manager (PM) will lead and manage a technical team of ~13 for a new 3+ year R&D program focusing on automated discovery and remediation of vulnerabilities within medical devices and hospital networks. Candidates must have prior security operations or R&D experience with healthcare environments containing medical devices; desired prior work experience examples include: SOC lead, CIO, CISO, vulnerability management lead, or vulnerability research lead. Work location and team will be remote / geographically diverse; anticipate 1-2 trips per quarter to the Washington D.C. area and/or Seattle, WA area for customer and partner meetings.

Job Req:

• Contingent offer with estimated start date of JAN-2025 (new program)
• Hiring authority for new program / technical team
• Remote work with quarterly trips (Washington D.C. and Seattle, WA) 
• Master’s or PhD desired
• Experience leading a technical team (researchers, analysts, SMEs, data scientists, software engineers) and communicating with key stakeholders / transition targets (hospital CIOs/CISOs and SOC managers)
  • Experience creating and presenting technical reports to a variety of skillsets – strong communication skills written and verbal
• Knowledgeable of software development and agile processes
• Experience managing technical resources (remotely) and adhering to project milestones & deliverables
• Experience with one or more of the following:
  • Cyber security operations within hospital / medical networks – in particular, networks containing medical devices. Knowledgeable of hospital / medical device products, vendors, and their upgrade/patching process.
• Cyber security research focused around non-standard device vulnerability discovery and mitigation (medical, embedded, ICS/SCADA, OT, or IoT). Knowledgeable of active & passive network and software scanning techniques to enumerate/map an environment and discover vulnerabilities and attack paths.
• Optional/desired:
  • Knowledgeable of healthcare cyber security products / solutions (e.g., Medigate), key health sector data/intelligence sources and threats (e.g., ransomware), and key health sector integration points for medical device management and security
• Knowledgeable of regulations and processes around medical device manufacturing, deployment, and security
• Relationships within healthcare community to inform and transition solutions (hospital CIOs/CISOs, American Hospital Association, Health-ISAC, FDA, NIH, etc.)

About PUNCH:

We’re problem solvers first & foremost. PUNCH’s origin story involves frustration with available INFOSEC tools and techniques—we came up thru the industry using these inefficient tools and techniques and decided there had to be a better way. We bring this laser focus on efficiency to every customer engagement.

We have trust as a hallmark in everything we do. PUNCH provides its team members with the maximum amount of ownership over their careers, the direction of the company, and the flexibility & freedom to accomplish their job without interference. Trust requires accountability; we live that, company-wide.

We back each other up. PUNCH is a supportive place to work. We’ve worked hard to create an environment that makes people better, encourages team work, and rewards a “pitch in” mentality.

We give back. To those in need. To the community. To the industry.

Does this sound like you?