Product Security Lead

Mondeadditif; Heverlee; Sur place; EUR 90 000 - 140 000; Plein temps

Résumé du poste

Materialise Software is seeking a Product Security Lead to own the security posture of our products, translating regulations and customer expectations into clear priorities for product and engineering teams.

You will drive risk-based decisions, collaborate with cross-functional leaders, and guide the development of security strategy and roadmap to ensure compliance and trusted delivery.

Qualifications

• Strong understanding of product and cloud security in modern DevOps environments.
• Experience working with security regulations and frameworks (ISO 27001, NIS2, SOC 2, NIST, FedRAMP, or similar).
• Proven ability to make and defend risk-based decisions.
• Credibility with senior engineering and product stakeholders.
• Clear written and verbal communication, especially around trade-offs.

Responsabilités

• Oversee the overall product security posture across the portfolio (CO-AM Platform, Magics).
• Interpret security legislation, standards, and customer requirements.
• Define product security objectives and non-functional requirements.
• Lead risk acceptance and exception management.
• Develop product security strategy, roadmap, and prioritization.
• Maintain external security posture toward customers, auditors, and regulators.
• Align security priorities with product and engineering planning cycles.
• Collaborate with Product Management, Engineering Management, DevSecOps, Security Architecture, and CISO.

Connaissances

Product security

Cloud security

DevSecOps

Regulatory frameworks

Risk-based decisions

Stakeholder credibility

Communication

Description du poste

At Materialise Software, we believe that better manufacturing starts with smarter, more connected workflows. If you’re passionate about helping companies make additive manufacturing more efficient, scalable, and reliable, you’ll love being a part of this team. Through the software we develop, organizations are managing the entire additive manufacturing process more efficiently and achieving the highest 3D printing standards.

Asthe ProductSecurity Lead of Materialise Software, you will be accountable for the overall security posture and regulatory compliance of our products.You translate complex security regulations, customer expectations, and risk into clear decisions, priorities, and trade-offs, enabling product and engineering teams to deliver securely at scale.You own the security outcomes and risk decisions, not day-to-day security implementation.

What you will do

Key accountabilities and core responsibilities

• Overall product security posture across our portfolio(CO-AM Platform,Magics)
• Interpretation of security legislation, standards, and customer requirements
• (e.g.,ISO 27001, NIS2, NIST-based frameworks)
• Definition of product securityobjectivesand non-functional requirements
• Explicit risk acceptance and exception management
• Product security strategy, roadmap, and prioritization
• External security posture towards customers, auditors, and regulators
• Regulation and risk
• Assess the applicability of security regulations and standards
• Define pragmatic compliance intent and scope
• Identify, document, and accept residual product securityrisks[
• Ensure risks and exceptions are explicit, time-bounded, and owned
• Strategy and alignment
• Define andmaintaina product security strategy aligned with business goals
• Translate regulatory and risk drivers into a prioritized security roadmap
• Align security priorities with product and engineering planning cycles
• Cross-functional leadership
• Partnercloselywith the: Product Management Team on roadmap alignment and customer commitments
• Engineering Management Team on delivery realities and investment trade-offs
• DevSecOpsLead on platform-level security objectives
• Security Architect on translating intent into secure designs
• CISO to align product security decisions with enterprise risk posture and regulatory obligations where applicable
• Act as an escalation point when security, product, and delivery priorities conflict
• Support the Engineering Delivery teams and Security Champions, such asimproving their understanding of the security checklist
• Governance and external trust
• Review security metrics and evidence produced by security engineering
• Support audits, certifications, and customer security assessments
• Represent the company’s product security posture externally whenrequired

What this role does not do

• Designdetailedsystemarchitectures
• Buildoroperatesecuritytooling
• Review code or manage vulnerabilities day-to-day
• Directlymanagesecurity champions or software engineers

Your profile

Required skills and experience

• Strong understanding of product and cloud security in modern DevOps environments
• Experience working with security regulations and frameworks
• (ISO 27001, NIS2, SOC 2, NIST, FedRAMP, or similar)
• Proven ability to make and defend risk-based decisions
• Credibility with senior engineering and product stakeholders
• Clear written and verbal communication, especially around trade-offs

Experience profile

• 8+ years in software engineering, product security, or security leadership roles
• Experience in product-centric, engineering-driven organizations
• Exposure to regulated environments is strongly preferred

Success looks like

• Security expectations are clear and predictable for product and engineering
• Risk acceptance is explicit, documented, and rarely escalated late