Give hope. Give health. Make your mark in the fight against cancer.

At Accuray, we make a direct and powerful impact on the lives of cancer patients every day — helping them live longer, better lives. But our commitment to innovation offers a truly unique opportunity: the chance to change the fight against cancer — helping to develop, introduce and support new treatment delivery systems and software that will give new hope and new health to cancer patients and cancer survivors around the world.

Accuray develops, manufactures and sells radiotherapy systems for alternative cancer treatments. Our radiation therapy for cancer makes treatment shorter, safer, personalized and more effective, ultimately enabling patients to live longer, better lives.

Job Description

Company Statement:

Give hope. Give health. Make your mark in the fight against cancer.

At Accuray, we make a direct and powerful impact on the lives of cancer patients every day — helping them live longer, better lives. But our commitment to innovation offers a truly unique opportunity: the chance to change the fight against cancer — helping to develop, introduce and support new treatment delivery systems and software that will give new hope and new health to cancer patients and cancer survivors around the world.

Accuray develops, manufactures and sells radiotherapy systems for alternative cancer treatments. Our radiation therapy for cancer makes treatment shorter, safer, personalized and more effective, ultimately enabling patients to live longer, better lives.

SUMMARY: 

As a Product Cybersecurity Engineer you are responsible for ensuring the security of Accuray products. In this role you will collaborate closely with other engineers and cross-functional team members within the organization to ensure that our products are secure.

REPORTING TO/DEPARTMENT: 

Reports to the Group Lead, Product Cybersecurity in the Product Integration department

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Security reviews for new products, technologies, and servicesSecure systems development including design, architecture, and implementationDeep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controlsAnalyze cybersecurity vulnerabilities identified in Accuray softwarePerform cybersecurity risk assessmentsDevelop mitigation and remediation plans for security vulnerabilitiesSecure development life cycle (SDLC) practices including threat modeling and security testingInfluence decision-makers and stakeholders to achieve a consistently high security barConduct network and/or application penetration testingCreate security guidance and documentationLead security projects (including security reviews, tool development, and creation of new security practices) with end-to-end ownershipUnderstand security concerns regarding Accuray productsParticipate in incident response activities

CORE COMPETENCIES:

Personal ExcellenceEffective in communication, demonstrates professionalism at all times, and has an accurate picture of selfStrengthening the TeamDemonstrates high performance standards and effectively collaborates with the team, demonstrates a sense of ownership over assigned deliverables, and shows a high degree of motivation toward achieving individual and team goalsDrive for ResultsApplies financial discipline and a good business sense, supports change, and makes high quality and timely decisions

REQUIRED QUALIFICATIONS:

Preferred or Desired:Knowledge of Linux and Windows operating systemsKnowledge of Networking protocolsExcellent problem solving/troubleshooting skillsExperience working in an FDA regulated environmentExcellent verbal and written communication skillsExcellent organizational skillsExperience with one or more scripting language preferably PowerShell or PythonProfessional experience with applied cryptographyProfessional experience building or reviewing threat modelsProfessional experience conducting security assessments, including penetration testingProfessional experience with NIST 800-53Rev 4/5 - "Security and Privacy Controls for Federal Information Systems and Organizations"

Required:Bachelor (undergraduate) degree in a relevant field (Computer Science, Software Engineer, Security, or others) OR an equivalent combination of education, training, and experienceMinimum of 5 years of professional experience in IT related fieldMinimum of 2 years of professional experience with any combination of at least 2 security focused technical disciplines, including the following: cloud security, network security, application security, mobile security, secure development methodologies, secure software development and coding, identity management, authentication and authorization, network architecture, system administration, and systems engineering

WORKING CONDITIONS

:

Indoor Environment: The position takes place indoors, providing a comfortable and climate-controlled workspaceSedentary Work: This role involves extended periods of sitting and working at a desk, requiring good ergonomic practicesComputer Usage: Proficiency with computers, including software applications and communication tools, is essential for tasks and collaborationMinimal Physical Strain: While physical demands are generally low, occasional light lifting and moving of objects might be requiredStructured Schedule: This position usually follows regular business hours, promoting a consistent and predictable work routine

To qualify for this position, candidates must be able to furnish proof that they are authorized to work in the country they are applying on a permanent basis without sponsorship.

EEO Statement

At Accuray, our commitment to patient-first outcomes drives an inclusive and collaborative work environment where the best ideas rise to the top — and everyone works to push them further. We value diversity in both the professional and personal backgrounds of our employees, as this variety adds rich energy to every team, every project and every work day. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national origin – including individuals with disabilities and veterans.