HistoSonics

The threat model here isn't a phishing email - it's a single compromised endpoint in a facility that physically destroys tumors with sound. HistoSonics, headquartered in Ann Arbor, Michigan with a presence in Minneapolis, builds the Edison® System: an FDA-cleared histotripsy platform that delivers pulsed ultrasound energy to mechanically disintegrate liver tumors at the sub-cellular level, no incisions required. The physician monitors the entire procedure in real-time. The company received De Novo clearance from the FDA in October 2023 and was subsequently acquired for $2.25 billion. It was also named one of TIME's 10 Most Influential Companies in Health & Life Sciences for 2026. For anyone in security, this is a converged-attack-surface problem: a networked medical device that directly interfaces with patient tissue, running proprietary software that controls focused sonic energy. The consequences of a breach aren't just data exfiltration - they're potential physical harm. That means the team has to think about device firmware integrity, secure real-time data pipelines between the treatment console and monitoring systems, regulatory compliance across FDA frameworks, and protecting proprietary histotripsy IP that represents years of R&D in ultrasound therapy and non-invasive tumor treatment. The engineering stack spans embedded systems, cloud-connected medical device software, and the oncology data workflows that flow between the clinic and the broader healthcare ecosystem. Anyone joining will be operating at the intersection of medical devices, safety-critical software, and the kind of regulated environment where a misconfigured access control isn't just an audit finding - it's a patient safety event. The company operates in a small geographic footprint but at global scale in terms of regulatory and clinical impact.