Blue Goat CyberBlue Goat CyberSMMedical Device Cybersecurity
    Start here
    Services
    • Medical Device Cybersecurity Consulting
    • FDA Premarket Cybersecurity Package
    • Medical Device Penetration Testing Services
    • FDA Deficiency Response
    • FDA Postmarket Cybersecurity
    • Medical Device Threat Modeling
    • eSTAR Cybersecurity Documentation Support
    See all services
    Products

    Blue Goat products

    • GoatWatch logoGoatWatchSBOM risk management for medical devices
    About
    Resources

    Learn

    • Blog
    • Podcast
    • Webinars
    • Talks & workshops
    • Glossary
    • FAQs

    Playbooks & Tools

    • Guides
    • Playbooks (PDF)
    • Infographics
    • Interactive Tools

    Signals & Proof

    • Goat FeedNew
    • News
    • Medical Device Security News
    • The Goat's Weekly
    • Case Studies
    • Proof / Receipts
    All resources, topic hubs, & collections →
    ⌘K
    Book Strategy SessionHow to prepare →
    Blue Goat Cyber

    Full-service medical device cybersecurity. We protect patients by securing connected medical devices from design through postmarket.

    275+ FDA submissions supported, zero cybersecurity rejections · Mission: 1,000 by 2028

    SDVOSB · Service-Disabled Veteran-Owned Small Business

    We sponsor 10 community projects →

    Services

    • FDA Premarket Cybersecurity Package
    • FDA Deficiency Response
    • Medical Device Threat Modeling
    • Medical Device Penetration Testing Services
    • FDA Postmarket Cybersecurity
    • All services →
    Services
    • FDA Premarket Cybersecurity Package
    • FDA Deficiency Response
    • Medical Device Threat Modeling
    • Medical Device Penetration Testing Services
    • FDA Postmarket Cybersecurity
    • All services →

    Company

    • About
    • Core values
    • Manifesto
    • Leadership
    • Why Us
    • Partners
    • Careers
    • Press
    • Press kit
    • Contact
    • Company overviewPDF
    Company
    • About
    • Core values
    • Manifesto
    • Leadership
    • Why Us
    • Partners
    • Careers
    • Press
    • Press kit
    • Contact
    • Company overviewPDF

    Resources

    • Blog
    • Guides
    • Podcast
    • Case studies
    • Monthly Pulse newsletter
    • All resources →
    Resources
    • Blog
    • Guides
    • Podcast
    • Case studies
    • Monthly Pulse newsletter
    • All resources →

    Get in touch

    • info@bluegoatcyber.com
    • 844-939-GOAT
    • Book a strategy session →
    • 1776 N Scottsdale Rd, Unit 727
      Scottsdale, AZ 85257Serving clients worldwide

    Follow

    © 2026 Blue Goat Cyber. All rights reserved.

    • Privacy
    • Terms
    • Cookies
    • Sitemap
    • Accessibility
    • CVD

    MedTech Cybersecurity · Since 2022

    Careers

    Apply: Executive Assistant to the CEO

    Set aside 20 to 30 minutes. This is a long application on purpose, and a real person reads every one.

    Back to the role

    Before you start

    This takes 20 to 30 minutes and asks you to do a small piece of real work. That is deliberate. We would rather read fifty considered applications than five hundred generic ones, and the questions below are the ones a resume cannot answer.

    Your answers save in this browser as you type, so you can close the tab and come back. Nothing is sent to us until you press the button at the bottom.

    About you

    Optional, but it helps. You can also paste a link above instead.

    Optional. You still answer "Why this role fits you" below in a few sentences.

    Paste a link to a 90 second video telling us why you are a fit. Unlisted YouTube, Loom, Google Drive, anything we can open. A phone camera is fine and we are not judging production quality. Optional, but it is the fastest way to stand out.

    The work

    Answer these in your own words. We are reading for how you think, not for length, and a generic answer is worse than a short one.

    The CEO has a client call, a podcast recording, and a conference flight that all land in the same afternoon after a reschedule. How do you decide what moves, and who do you tell?

    An email arrives from someone claiming to be an existing client asking the CEO to urgently review a shared file. What do you check before it reaches him?

    You open the inbox to five messages: a podcast guest asking to reschedule, a conference sponsorship invoice, a newsletter, a client asking for a call this week, and a vendor cold pitch. In a few sentences each, say what you would do with every one.

    Describe the busiest executive calendar you have managed. What tools did you use, and what was your system for keeping it accurate?

    Quick questions

    Ten of them, a few minutes at most. Pick the best answer. We are not testing trivia, and getting a few wrong will not disqualify you.

    Who does this role report to? The answer is on the job posting.

    We use AI every day and we expect you to. Tell us honestly how you used it on this application: which tool, on which parts, and what you changed afterwards. "I did not use it" is a completely fine answer. What we cannot work with is a no when the writing says otherwise.

    Tell us something unique about you that will not show up anywhere else in this application. A hobby that got out of hand, something you build or collect or compete in, a language, a detour in your career, an unpopular opinion about our industry. Or, if you have an idea for how we should be working, tell us that instead. Optional, and there is no right answer.

    How you work: our core values

    Patient safety comes first here, ahead of deadlines, clients and convenience. After that we hold eight standards: role competence, client and team trust, ownership, judgment under ambiguity, growth and coachability, rigor and attention to detail, proactive risk anticipation, and innovation that never trades away what we protect. These questions are how we learn whether that is how you already work.

    Give us real examples from your own work. Specific and honest beats polished.

    Standard: Patient safety comes first

    Tell us about a time you raised a safety, quality or compliance concern when it was inconvenient: it cost a deadline, annoyed a client or a boss, or you were not sure it was big enough to mention. What was it, who did you tell, and what happened? If you have never done this, tell us about the time you should have and did not.

    Standard: 3. Ownership

    Describe a gap or problem that was clearly nobody's job, which you noticed and closed. What did you do, did you ask permission first, and what changed because you were involved?

    Standard: 5. Growth and coachability

    What is the most useful critical feedback you have received? Quote it as closely as you can, tell us how it felt at the time, and tell us specifically what you do differently now.

    Standard: 4. Judgment under ambiguity

    Tell us about a decision you made without all the information you wanted. What were the two or three ways to read the situation, which did you pick and why, and in hindsight was it the right call?

    Situation 1

    Two days before a client's FDA submission you notice something in your own earlier work that might be wrong. You are about 70% sure it is minor. What do you do?

    Situation 2

    You committed to a Friday deliverable. On Wednesday you realize it will be Monday. What do you do?

    Situation 3

    A number in a report you are about to send does not match the source by a small amount. Nobody would likely notice. What do you do?

    Situation 4

    A client asks you to drop a test step to hit their launch date. The step covers a real risk. What do you do?

    Situation 5

    Your manager tells you a piece of your work missed the mark and you disagree with part of the feedback. What do you do?

    Work sample file

    Optional but strongly encouraged: attach one real piece of your work. A redacted report, test plan, project plan, proposal, scope of work, article, or a set of posts. Remove anything confidential; we never want a client's material. PDF, Word, text or image, up to 10 MB. If you skip it, tell us why in a sentence.

    Prefer email? Write to careers@bluegoatcyber.com.

    We use what you send here only to evaluate you for this and future roles. We do not sell or share it.