Threat Modelling

Staff Product Security Engineer | Medical Devices | Limerick, Ireland | Onsite

πŸ” Staff Product Security Engineer

πŸ“ Location: Limerick City, Munster, Ireland (Onsite – minimum 4 days per week)
🏒 Industry: Medical Devices / Healthcare Technology
🧠 Level: Mid–Senior
πŸ’Ό Employment Type: Full-Time
✈️ Travel: Occasional
πŸ›‚ Visa Sponsorship: Not available
πŸ’Ά Salary Range: €85,000 – €95,000
🎁 Benefits: Full benefits package

πŸš€ The Opportunity

An innovative global medical technology organisation is seeking a Staff Product Security Engineer to play a critical role in shaping and strengthening product security across next-generation healthcare solutions.

This is a highly visible position offering the opportunity to:

  • Influence security strategy across product portfolios

  • Embed secure-by-design principles across the full product lifecycle

  • Lead security maturity improvements

  • Work cross-functionally with R&D, Quality, Regulatory, and IT

  • Protect products in an evolving threat landscape

If you're passionate about cybersecurity, product resilience, and impact-driven work in healthcare, this role offers both purpose and technical depth.

🎯 Key Responsibilities

  • Lead and develop a high-performing Product Security function

  • Define and guide product security strategy aligned with regulatory and enterprise cybersecurity objectives

  • Embed secure-by-design practices, threat modelling, and proactive vulnerability management

  • Partner with R&D, Quality, Regulatory, and IT teams to ensure security is integrated throughout the product lifecycle

  • Conduct product security risk assessments and support remediation strategies

  • Support product security documentation, including governance and compliance artefacts

  • Review technical designs and source code; provide clear, actionable recommendations

  • Support incident response and vulnerability management efforts

  • Implement best practices for:

    • Encryption & PKI

    • Authentication & access control

    • Audit logging

    • Secure hardening

    • Patch management

    • Vulnerability monitoring

  • Track and report security posture using meaningful metrics

  • Ensure adherence to development policies and quality management systems

🧠 Required Experience & Qualifications

  • Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience)

  • 5+ years experience in:

    • Security architecture

    • Secure software development

    • Systems and architecture design

  • Experience working in regulated environments with strong QMS adherence

  • Proven experience leading or mentoring teams

  • Strong understanding of:

    • Encryption algorithms and PKI

    • Embedded device security

    • Networking and threat models

    • Dynamic and static code analysis tools

  • Excellent written and verbal communication skills

  • Strong collaboration and stakeholder management abilities

🧩 Technical Skills Snapshot

Domain

Experience

Product Security

Secure-by-design, threat modelling, vulnerability management

Cryptography

Encryption, PKI

AppSec

Static/Dynamic analysis, secure SDLC

Embedded Security

Yes

Networking

Security controls, common threats

Documentation

SAP, SharePoint, DocuSign or similar

Regulated Environments

Medical / highly regulated industries

Tools

Microsoft Office, security tooling

🏒 Work Style & Culture

  • Strong emphasis on onsite collaboration (minimum 4 days/week in office)

  • Cross-functional, high-impact environment

  • Focus on innovation, continuous improvement, and ownership

  • Opportunity to influence product direction at a strategic level

πŸ“Œ Candidate Snapshot

Attribute

Details

Role

Staff Product Security Engineer

Location

Limerick, Ireland

Experience

10–15 years ideal

Leadership

Yes (influence & team leadership expected)

Domain

Medical device security

Environment

Regulated, high-compliance

Work Model

Onsite-first

🌍 Why This Role Matters

Your work will directly contribute to:

  • Protecting patient safety

  • Strengthening cybersecurity in healthcare systems

  • Ensuring regulatory compliance

  • Driving security maturity across critical medical technologies

This is a career-defining role for someone who wants both technical depth and meaningful impact.