Senior Product Security Engineer – Pharma (Remote, Spain/Portugal)

About the role

We are looking for a Senior Product Security Engineer to protect medical devices and healthcare solutions throughout their entire lifecycle. The role is fully remote and operates within a highly regulated, international environment.

Key responsibilities

• Define technical security and privacy requirements for products, medical devices, and healthcare solutions.
• Conduct threat modeling and cybersecurity risk assessments to identify threats, vulnerabilities, and impacts.
• Analyze product security posture and design appropriate risk mitigation measures.
• Manage and assess vulnerabilities during pre‑market and post‑market phases.
• Evaluate findings from SCA, SAST, DAST, IaC scans and penetration testing, and guide remediation.
• Support security incident response and forensic investigations.
• Coordinate external security testing activities and validate remediation.
• Develop and maintain technical documentation, processes, playbooks, and security tools.

Required profile

• Bachelor’s degree in Engineering, Computer Science, or a related field.
• 7+ years of experience in security engineering, product security, application security, or vulnerability management.
• Hands‑on experience working with software development teams and cloud platforms.
• Strong background in threat modeling, risk assessment, and vulnerability analysis.
• Experience in regulated sectors such as healthcare or medical devices.
• Fluent English, both written and spoken.

Required skills

• Threat Modeling
• Cybersecurity Risk Assessment
• SCA, SAST, DAST, IaC scanning
• Penetration Testing
• Application Security throughout the SDLC
• Knowledge of ISO 27000, FDA Guidance, MDGC, HITRUST, GDPR

What we offer

• Competitive salary package based on profile.
• Permanent contract.
• Learning & Development opportunities.
• Friend Referral Program.