Intern

Position Summary

Spectral AI, Inc. (Spectral) is seeking a Cybersecurity Engineering Intern to join our growing design and development team. The position is based in Dallas, Texas, with hybrid work flexibility in accordance with the Spectral Employee Handbook guidelines.

Cybersecurity Risk Management

• Assist with cybersecurity risk assessments for medical device systems using structured methodologies (Threat Modeling, STRIDE, DREAD, Attack Trees, SBOM analysis) under the supervision of senior engineers.
• Help document risk evaluations aligned with AAMI TIR57, AAMI TIR97, FDA Premarket Cybersecurity Guidance, and ISO 14971.
• Observe and participate in Coordinated Vulnerability Disclosure (CVD) processes, learning how vulnerabilities are responsibly reported, remediated, and communicated in alignment with industry best practices.
• Maintain and update cybersecurity documentation and supporting artifacts, including: Security risk assessment, Security risk management reports, Threat models.

Secure Software Development (IEC 81001 and IEC 62304)

• Learn and apply secure coding practices alongside software engineers, and participate in structured code review processes.
• Assist in verifying implementation of security requirements, encryption standards, authentication and authorization controls, and security-relevant logging.
• Assist in evaluating SOUP/OTS components for vulnerabilities, maintenance status, and compliance with FDA software bill of material (SBOM) requirements.
• Create and maintain SBOM (e.g. CycloneDX, SPDX) using automated tools such as HELM and Dependency-Check.

Vulnerability and Patch Management

• Assist with vulnerability scanning across firmware, software, cloud services, Linux-based, and Windows-based cart devices.
• Triage and validate Common Vulnerabilities and Exposures (CVEs) relevant to device components, run-time environments, and third-party libraries, with guidance.
• Prepare vulnerability mitigation notes and support development teams during remediation.
• Track findings, analyze root causes, and support remediation verification.

Incident Response and Monitoring

• Assist in establishing cybersecurity monitoring processes for fielded devices and cloud environments.
• Support investigation of security anomalies and incidents, assist with log analysis, and support corrective/preventive actions (CAPA).