Sr Product Security Engineer

Description

The team builds the connected digital side of implantable cardiac devices, including secure device connectivity, real-time data platforms, clinical tools and patient-facing apps.

The work keeps these life-saving therapies secure, safe and reliable while improving them over time.

The company is a large global healthcare technology firm, and this role sits in its Patient Care Systems unit.

Responsibilities

• Work with mobile app, Software as a Medical Device, API and cloud-connected software teams to build security in from the start.
• Run threat models and security risk assessments for new mobile applications.
• Review application architecture and recommend security controls.
• Guide teams on secure storage, certificate validation, runtime protection and app hardening.
• Explain results from SAST, SCA, IAST and DAST tools so developers know what to fix.
• Define security requirements and help make secure design decisions.
• Review penetration test findings and support remediation.
• Investigate vulnerabilities, plan fixes and support post-market security work, including PSIRT and coordinated vulnerability disclosure.
• Write cybersecurity documents for regulatory submissions, such as threat models, risk assessments, test plans, SBOMs, architecture documents and vulnerability dispositions.
• Answer regulatory questions, customer security assessments and inspection queries.
• Improve security processes, tooling and automation, and share secure development practice with teams.
• Balance patient safety, usability, regulatory expectations and engineering speed.

Requirements

• Bachelor's degree (Level 8 NFQ) in computer engineering, software engineering, computer science or a related technical discipline.
• 4+ years of cybersecurity or related technical experience, or an advanced degree with 2+ years of relevant experience.
• Mobile application security experience on iOS, Android,.NET MAUI or Xamarin.
• Knowledge of the secure software development lifecycle, OWASP Top 10 and OWASP MASVS.
• Experience with API security and cloud-connected applications.
• Working knowledge of PKI, JWT and TLS.
• Threat modelling skills and hands-on use of SAST, SCA, IAST, DAST and SBOM analysis.
• Proficiency in Python or PowerShell.
• Understanding of FDA cybersecurity guidance and IEC 81001-5-1.
• Experience in medical device cybersecurity, PSIRT or coordinated vulnerability disclosure.

Conditions

The role is hybrid.

Benefits

• Competitive salary and a flexible benefits package.
• Pay range for Ireland: 64,640.00 EUR to 96,960.00 EUR.
• The final salary is set using objective, job-related criteria such as relevant experience, skills and qualifications, under the company's compensation framework.
• Eligible for the company's short-term incentive, the company Incentive Plan (MIP).
• A range of benefits, resources and compensation plans to support you at each career and life stage.