Open role

Business Development Manager, Medical Device Cybersecurity

Build the pipeline of medical device manufacturers who need cybersecurity support, and own our presence at the medtech conferences where those conversations start.

All open roles

Reports to: Chief Executive Officer
Status: Full-time employee, 40 hours per week
Location: Remote (United States), with regular medtech event travel
Compensation: Competitive base commensurate with experience plus performance incentive, paid every two weeks, with benefits including health, dental, vision, 401(k), and an educational allowance
Equipment: Bring your own laptop and setup, and we cover the project-specific hardware and lab gear the work needs

About the role

Blue Goat Cyber is expanding, and we are looking for a Business Development Manager who can create real relationships with medical device manufacturers and turn our event presence into pipeline. Our buyers are regulatory leaders, quality leaders, engineering leaders, and founders preparing a device for an FDA submission. They do not respond to volume outreach, and they can tell within a sentence whether you understand their world.

A large share of this role is events. We speak and exhibit at medtech conferences, and someone needs to own that end to end: choosing which events are worth the money, preparing the booth and the team, booking meetings before we arrive, working the floor, and following up while the conversation is still warm.

This is not a script-reading role and there is no boiler room here. You will be trusted with our reputation in a small industry where everyone talks, so honesty about what we can and cannot do matters more than closing a quarter.

You are a fit if

You build relationships rather than work a list

You can hold a credible conversation with a regulatory or engineering leader without pretending to be an engineer.
You follow up because you said you would, not because a sequence fired.
You would rather lose a deal than oversell what we deliver.
You keep relationships alive across the long buying cycles that regulated industries run on.

You own events end to end

You have run a booth and know that the outcome is decided by the work done before the doors open.
You book meetings ahead of an event instead of hoping for foot traffic.
You are comfortable approaching strangers on a show floor and qualifying them quickly and politely.
You handle the logistics, the shipping, the badges, and the schedule without needing to be managed.

You are organized and self-directed

You keep the CRM accurate because your own forecast depends on it.
You plan a quarter of activity and execute it without daily direction.
You know the status and next step for every opportunity you own.
You report honestly on what is real pipeline and what is still a conversation.

You learn the domain

You will learn enough about FDA cybersecurity expectations to scope a conversation and know when to bring in a technical teammate.
You ask better questions after each engagement and read what we publish.
You bring market feedback back to the team instead of only reporting wins.

What you will own

Pipeline development

Identify and reach medical device manufacturers preparing devices for submission or managing fielded devices.
Run first conversations, qualify fit, and hand technical scoping to the sales engineer.
Maintain accurate opportunity records, next steps, and forecast in the CRM.
Build referral relationships with regulatory consultancies, test labs, and industry partners.

Event ownership

Recommend which conferences and sponsorships we invest in, with the reasoning and the budget.
Own booth logistics, materials, shipping, staffing, and the onsite schedule.
Book meetings before the event and fill the calendar of whoever is attending with us.
Work the floor, qualify conversations, and capture what was actually said.
Run structured follow-up within days of the event and report on what it produced.

Market feedback and content

Bring back what buyers are asking about so our guides, talks, and services reflect it.
Support speaking submissions and coordinate the logistics behind our talks.
Work with marketing on event promotion, campaign timing, and follow-up sequences.

Required skills and experience

5+ years of business development or sales experience selling professional services, technical services, or regulated-industry solutions.
Demonstrated experience owning a pipeline from first contact through closed business.
Experience representing a company at trade shows or industry conferences, including pre-event meeting generation and post-event follow-up.
Ability to travel to medtech events in the United States and occasionally internationally.
Strong written and verbal communication skills, including writing follow-up that people actually answer.
Comfort working a CRM daily and keeping forecast data honest and current.
Ability to work independently in a remote, high-trust environment.

Preferred experience

Experience selling into medical device, healthcare, life sciences, or another highly regulated industry.
Familiarity with FDA premarket submissions, quality systems, or cybersecurity services.
An existing network among medical device manufacturers, consultancies, or notified bodies.
Experience choosing and negotiating event sponsorships and managing an event budget.

Your first 90 days

What success looks like early on, so you know what you are walking into.

1
First 30 days
- Learn our services, our buyers, and the language regulatory and engineering leaders use.
- Review the last year of events, what they cost, and what they produced.
- Take over inbound conversations and run first calls with a teammate listening.
2
Days 30 to 60
- Own the outbound and partner motion for a defined segment.
- Build the event calendar and budget recommendation for the next two quarters.
- Run your first event start to finish with pre-booked meetings on the schedule.
3
Days 60 to 90
- Carry a forecast you stand behind and report it honestly each week.
- Show closed business or late-stage opportunities sourced by you.
- Propose the changes to our event strategy that the first quarter taught you.

Tools we use

HubSpot
Google Workspace
Slack
Zoom
Asana
PandaDoc
LinkedIn Sales Navigator

About Blue Goat Cyber

Blue Goat Cyber is a medical device cybersecurity company dedicated to protecting patient lives by securing the technologies that power modern healthcare. We support medical device manufacturers as they build, test, and launch secure devices that meet FDA expectations and operate safely in the real world.

We are a remote, high-trust, high-ownership team that values clear communication, rigorous thinking, proactive problem solving, continuous learning, and attention to critical details. We expect every team member to own their work, communicate clearly, and support the mission without ego.

Before you apply

The terms every person here works under. Read them now rather than at offer stage, along with our core values and the honest list of who this is not for.

Work authorization

You must be authorized to work in the United States. We do not sponsor visas for these roles.
All roles are performed from within the United States.

Confidentiality and NDA

You will sign a mutual nondisclosure agreement before you see any client material, and client-specific NDAs where a client requires one.
You will see unreleased device designs, firmware, source code, vulnerabilities, and submission content. None of it is yours to discuss, publish, screenshot, or reference, during or after the engagement.
Client material stays in company systems. No personal cloud storage, personal email, personal repositories, or unvetted AI tools.
Anything we publish that draws on client work is anonymized and cleared with the client first.

How we expect you to use AI

Use AI every day if it helps, on the company ChatGPT and Claude accounts we provide, and keep client material inside them: firmware, source code, submission documents, findings, and client names never go anywhere else.
You own the accuracy of anything you send out, because models get recognition numbers, clause references, and test conclusions wrong in ways that read perfectly well. The full policy is in the careers FAQ.

Security and background

Offers are contingent on a background check and on reference checks.
You will use company-required security controls on any device that touches client data, including full-disk encryption, screen lock, and our password manager and multi-factor authentication.
Report a suspected compromise or data exposure immediately. We treat honest, fast reporting as the right behavior, not a fault.
Some client engagements require additional screening or training before you can be assigned.

Equal opportunity

Blue Goat Cyber is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic.
If you need an accommodation at any point in the hiring process, tell us and we will arrange it.

Apply

Send your resume, any links to your work, and a short note about why this role fits. It takes a few minutes and a real person on our team reads every application.

Apply for this role Or apply by email

If you do not hear back within two weeks, we have decided not to move forward for now. We keep applications on file for future openings.