Medical Platform Security Architect — Cloud & Compliance

Mondeadditif; Heverlee; On-site; EUR 90,000 - 150,000; Full time

Job summary

Materialise Medical is seeking a Product Security Architect to lead secure architectures for our cloud-based platform, including Materialise Mimics Flow. You will define secure system architectures, implement IAM and data protection, and work with DevOps to integrate security across the lifecycle.

You will collaborate with engineering and product teams to ensure compliance with ISO 27001 and GDPR, and support audits and security initiatives across the organization.

Qualifications

• 8+ years of experience in software engineering, system architecture, or application security.
• Experience leading architecture reviews and driving security decisions across teams.
• Experience designing and implementing security controls (IAM, encryption, secrets management, network segmentation) in production environments.

Responsibilities

• Define and review secure system architectures for applications, services, and platforms.
• Design and guide the implementation of IAM, encryption, and access controls across environments.
• Lead threat modeling sessions and risk assessments with engineering teams.
• Embed security into SDLC and guide secure coding standards and patterns.
• Support audits and regulatory processes, ensuring traceability of controls.
• Drive a product security roadmap aligned with business goals.

Skills

Secure architecture

Threat modeling

Security controls

Cloud security

DevSecOps

Stakeholder management

Security communication

Tools

SAST

DAST

SCA

Kubernetes

AWS

Job description

Materialise Medical is seeking a Product Security Architect to lead secure architectures for our cloud-based platform, including Materialise Mimics Flow. You will define secure system architectures, implement IAM and data protection, and work with DevOps to integrate security across the lifecycle.

You will collaborate with engineering and product teams to ensure compliance with ISO 27001 and GDPR, and support audits and security initiatives across the organization.