Senior Product Security Engineer – Pharma

• Define technical security and privacy requirements for products, medical devices, and healthcare solutions
• Conduct Threat Modeling and Cybersecurity Risk Assessments
• Analyze product security posture and define risk mitigation measures
• Design and maintain security and privacy controls throughout the product lifecycle
• Manage and assess vulnerabilities during pre-market and post-market activities
• Assess vulnerabilities identified through SCA, SAST, DAST, IaC, Penetration Testing, and other security testing activities
• Provide technical input into remediation plans and follow up on remediation activities
• Investigate complex security issues and provide technical recommendations
• Support Security Incident Response and forensic activities
• Technically coordinate external security testing, including penetration testing, validation of findings, and remediation follow-up
• Develop and maintain technical documentation, processes, playbooks, and Product Security tools
• Stay up to date with emerging security threats, technologies, and best practices
• Act as a technical reference for Product Security, sharing knowledge and supporting less experienced security professionals
• Collaborate with Software Development, Cloud, Product Security, and Incident Response teams

• Bachelor’s degree in Engineering, Computer Science, or a related field
• 7+ years of experience in Security Engineering, Product Security, Application Security, Vulnerability Management, or related areas
• Hands-on experience working with software development teams and Cloud platforms
• Strong experience in Threat Modeling and Cybersecurity Risk Assessment
• Solid experience in vulnerability analysis and remediation strategies
• Practical experience with SCA, SAST, DAST, IaC, and/or Penetration Testing
• Good understanding of Application Security and security throughout the Software Development Lifecycle
• Experience working in Healthcare, Medical Devices, or other regulated industries
• Strong knowledge of standards and regulations such as ISO 27000, FDA Guidance, MDGC, HITRUST, and GDPR
• Strong analytical and problem-solving skills, with the ability to assess complex technical security issues
• Excellent communication skills and ability to collaborate with international technical teams
• Fluent English, both written and spoken
• Willingness to travel up to 20%

• Permanent contract
• Learning & Development
• Friend Referral Program
• Flexible schedule
• 100% remote work from Spain or Portugal