Product Cybersecurity Engineer

📣 Join ViCentra – Empower Bold Change in MedTech

📍 Location: Utrecht, the Netherlands
💼 Hybrid

👩💻 Your Impact

As Product Cybersecurity Engineer, you'll make sure the connected medical devices that people living with diabetes rely on every day are secure by design. You'll drive cybersecurity engineering across our devices, apps and supporting systems, from first concept through to post-market surveillance, embedding security into our software and hardware architectures so our products stay safe, effective and compliant.

This is where trust gets built into every design decision. As connected care grows and regulatory expectations rise across the EU and US, you'll be the person who turns an evolving threat landscape into clear requirements, works hands-on with engineers to get the controls right, and gives patients, clinicians and regulators every reason to rely on what we build.

🔧 What You’ll Take On

In your role, you will:

• Lead product security analyses, including threat modelling, cybersecurity risk assessments and security concept reviews for our devices, mobile apps and connected components.
• Translate identified threats and risks into technical cybersecurity requirements that support compliance with IEC 81001-5-1, IEC 62304 and applicable EU and FDA cybersecurity expectations.
• Partner hands-on with development teams to decide on and verify the correct implementation of security mechanisms and controls, such as secure boot, secure update and cryptographic key handling.
• Develop requirements, specifications, and software test plans and protocols where needed.
• Perform and support security verification and validation, including coordinating penetration tests, and produce the associated quality system and regulatory documentation.
• Support incident response, vulnerability handling, SBOM maintenance and post-market security monitoring in line with regulatory requirements.
• Create and maintain the cybersecurity procedures, templates and work instructions that shape how we build secure products.
• Collaborate with product owners, engineering teams, suppliers and external partners, communicating security risk clearly to technical and non-technical audiences alike.
• Stay ahead of the evolving threat landscape, security standards and regulatory guidance, bringing expert input that strengthens product robustness and compliance.

📌 What You Bring

• Bachelor's degree in engineering, IT, computer science or a related field, or equivalent professional experience.
• 3+ years of experience in product cybersecurity, including cybersecurity or safety management processes.
• Strong understanding of security risk management, compliance, policies and standards.
• Strong technical writing skills, with the ability to produce clean, formal documentation.
• A proven track record of delivering on time, with the autonomy to structure your own deliverables and a high level of accuracy and attention to detail.
• A curious, proactive mindset toward learning new technologies and domain-specific regulations.
• Fluency in English.
• Experience with hardware and software security features across embedded devices, Android/iOS apps and cloud, and with Bluetooth Low Energy (BLE), is a strong plus.
• Penetration testing experience and familiarity with the Radio Equipment Directive (RED) cybersecurity requirements are a plus.
• Working knowledge of software development (e.g. C, Kotlin, Swift), a Master's degree or recognised cybersecurity certification, and exposure to the medical device industry are all a plus.