Blue Goat Cyber^SMMedical Device Cybersecurity

⌘K

Careers

Apply: Content and Social Media Manager

Set aside 20 to 30 minutes. This is a long application on purpose, and a real person reads every one.

Before you start

This takes 20 to 30 minutes and asks you to do a small piece of real work. That is deliberate. We would rather read fifty considered applications than five hundred generic ones, and the questions below are the ones a resume cannot answer.

Draft it somewhere else if you prefer. The page does not save as you go.

Role

About you

Full name *

Email *

Phone

Location

LinkedIn, GitHub, or portfolio links

Resume (PDF, Word, or text, up to 10 MB)

Optional, but it helps. You can also paste a link above instead.

Video link

Paste a link to a 90 second video telling us why you are a fit. Unlisted YouTube, Loom, Google Drive, anything we can open. A phone camera is fine and we are not judging production quality. Optional, but it is the fastest way to stand out.

The work

Answer these in your own words. We are reading for how you think, not for length, and a generic answer is worse than a short one.

Why this role fits you *

Scenario one *

Pick one recent FDA cybersecurity development and describe the LinkedIn post you would write about it: the hook, the point, and the line you would not cross on client confidentiality.

Scenario two *

A device engineer comments publicly that a technical claim in one of our posts is wrong. Walk us through how you handle it, who you involve internally, and what happens if they turn out to be right.

Write the post *

Write the LinkedIn post you would publish the week a new FDA cybersecurity guidance lands. Under 150 words, no hashtag wall, no emoji ladder, and it has to make sense to a VP of Regulatory who has already read the guidance.

Specifics *

Which accounts have you personally run? Give us the audience size when you started and when you left, the posting cadence you held, and the single post that performed best and why you think it did.

Quick questions

Ten of them, a few minutes at most. Pick the best answer. We are not testing trivia, and getting a few wrong will not disqualify you.

1. Our primary audience on LinkedIn is:

Medical device manufacturers and their regulatory and quality leadersPatients and consumersHospital IT staffCybersecurity job seekers

2. Which of these can never appear in a post?

The publication date of an FDA guidanceA link to one of our own guidesA client's device name or a finding from their testA photo from our conference booth

3. A draft post contains a specific statistic. Before publishing you:

Publish it, since engagement matters more than the decimalVerify it against the original source and link to itRound it up so the number lands harderAttribute it to "studies show"

4. A technical claim in a draft post should be checked against:

A competitor's postA search engine summaryAn internal opinionThe primary source, such as the guidance or standard itself

5. Posting about an engagement is acceptable only when:

The client is not named directlyThe client has given explicit written permissionThe device is already on the marketMore than a year has passed

6. The best hook for this audience is:

A provocative statistic with no sourceAn industry buzzwordA specific problem they recognize from their own submissionA motivational quote

7. If a post turns out to contain an error, you:

Correct it visibly and say what changedDelete it quietlyLeave it and reply privatelyArgue the point in the comments

8. Which of these is a fact you can safely state?

That we guarantee FDA clearanceThat competitors fail reviewsThat most devices are insecureThat the premarket cybersecurity guidance was finalized on a given date, with a link

9. Repurposing a long guide for social works best when you:

Post the introduction verbatimSummarize every sectionPull one specific claim and make it stand alone, then linkPost the whole thing as an image

10. Cadence matters because:

The algorithm rewards volume above allA predictable rhythm builds an audience that expects the next postIt fills the calendarIt reduces writing time

Detail check *

Who does this role report to? The answer is on the job posting.

How you used AI on this application *

We use AI every day and we expect you to. Tell us honestly how you used it on this application: which tool, on which parts, and what you changed afterwards. "I did not use it" is a completely fine answer. What we cannot work with is a no when the writing says otherwise.

Something unique about you

Tell us something unique about you that will not show up anywhere else in this application. A hobby that got out of hand, something you build or collect or compete in, a language, a detour in your career, an unpopular opinion about our industry. Or, if you have an idea for how we should be working, tell us that instead. Optional, and there is no right answer.

Prefer email? Write to careers@bluegoatcyber.com.

We use what you send here only to evaluate you for this and future roles. We do not sell or share it.