Insulet Corporation
Sr Director, Cyber Security Operations / Deputy CISO
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Insulet Corporation
Insulet Corporation is a medical device company based in Bedford, Massachusetts, founded in 2000. It specializes in tubeless, wearable insulin delivery systems designed to simplify diabetes management for individuals with insulin-dependent diabetes. The company operates globally in 25 countries and employs around 2,900 people, serving over half a million users, including 100,000 children. Insulet's primary product is the OmniPod system, a disposable, tubeless insulin pump that allows users to manage their diabetes without the hassle of tubes. The OmniPod has evolved over the years, with significant advancements including the OmniPod DASH, which features a touchscreen Personal Diabetes Manager, and the OmniPod 5, the first automated insulin delivery system that integrates continuous glucose monitoring for real-time adjustments via a smartphone app. Insulet is committed to improving the lives of people with diabetes through innovative technology, focusing on wearability, automation, and user convenience.
Security at Insulet Corporation
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Insulet's philosophy centers on the belief that 'the safety and security of our patients and products is paramount.' The team follows a risk-based approach, aligning with ISO/IEC 27000 series and NIST CSF.
- They emphasize developer enablement, aiming to 'partner closely with engineering' to embed security into the SDLC and CI/CD, while focusing on 'reducing false positives' through automation and triage.
Security Team
- Insulet maintains a 'dedicated, global product security team' integrated into the 'Global Security Office.' The team is led by Tim Williams, who serves as the Chief Information Security Officer (CISO) and manages a global team of over 60 professionals.
- Other identified members include Richard O'Brien (Senior Manager, Enterprise Cybersecurity) and Janil Patel (Associate Enterprise Cybersecurity Analyst).
- The company is actively hiring, with recent postings for Application Security Engineer and Product Security Engineer roles.
Key Initiatives
- Active initiatives include a Coordinated Disclosure Program and a Bug Bounty program hosted on HackerOne.
- The team is focused on maturing DevSecOps capabilities and performing risk-based security analysis, including threat modeling and maintaining a Risk Register.
- Historically, the company achieved ISO 27001 and DTSec certifications for its Omnipod DASH system, though these specific certifications are older than 8 months.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.