Product Security Lead

Materialise; Heverlee; Sur place; EUR 100 000 - 140 000; Plein temps

Résumé du poste

Materialise Software is seeking a Product Security Lead to own the security posture of CO-AM Platform and Magics, translating regulations like ISO 27001 and NIS2 into actionable requirements. You will partner with Product, Engineering, and DevSecOps teams to define security strategy, roadmaps, and guardrails, ensuring secure delivery at scale while representing the company to auditors and customers.

8+ years in software security, strong communication skills, and the ability to make risk-based

Qualifications

• 8+ years in software engineering, product security, or security leadership roles.
• Experience with security regulations and frameworks (ISO 27001, NIS2, SOC 2, NIST, FedRAMP, or similar).
• Proven ability to make and defend risk-based decisions.
• Clear written and verbal communication, especially around trade-offs.

Responsabilités

• Oversee the overall product security posture across our portfolio (CO-AM Platform, Magics).
• Interpret security legislation, standards, and customer requirements (e.g., ISO 27001, NIS2, NIST-based frameworks).
• Define product security objectives and non-functional requirements.
• Explicit risk acceptance and exception management.
• Develop product security strategy, roadmap, and prioritization.
• Represent the external security posture to customers, auditors, and regulators.

Connaissances

Product security

Risk-based decisions

Communication

Stakeholder management

DevOps security

Description du poste

At Materialise Software, we believe that better manufacturing starts with smarter, more connected workflows. If you’re passionate about helping companies make additive manufacturing more efficient, scalable, and reliable, you’ll love being a part of this team. Through the software we develop, organizations are managing the entire additive manufacturing process more efficiently and achieving the highest 3D printing standards.As the Product Security Lead of Materialise Software, you will be accountable for the overall security posture and regulatory compliance of our products. You translate complex security regulations, customer expectations, and risk into clear decisions, priorities, and trade-offs, enabling product and engineering teams to deliver securely at scale. You own the security outcomes and risk decisions, not day-to-day security implementation.What you will doKey accountabilities and core responsibilitiesOverall product security posture across our portfolio (CO-AM Platform, Magics)Interpretation of security legislation, standards, and customer requirements(e.g., ISO 27001, NIS2, NIST-based frameworks)Definition of product security objectives and non-functional requirementsExplicit risk acceptance and exception managementProduct security strategy, roadmap, and prioritizationExternal security posture towards customers, auditors, and regulatorsRegulation and riskAssess the applicability of security regulations and standardsDefine pragmatic compliance intent and scopeIdentify, document, and accept residual product security risks[Ensure risks and exceptions are explicit, time-bounded, and ownedStrategy and alignmentDefine and maintain a product security strategy aligned with business goalsTranslate regulatory and risk drivers into a prioritized security roadmapAlign security priorities with product and engineering planning cyclesCross-functional leadershipPartner closely with the:Product Management Team on roadmap alignment and customer commitmentsEngineering Management Team on delivery realities and investment trade-offsDevSecOps Lead on platform-level security objectivesSecurity Architect on translating intent into secure designsCISO to align product security decisions with enterprise risk posture and regulatory obligations where applicableAct as an escalation point when security, product, and delivery priorities conflictSupport the Engineering Delivery teams and Security Champions, such as improving their understanding of the security checklistGovernance and external trustReview security metrics and evidence produced by security engineeringSupport audits, certifications, and customer security assessmentsRepresent the company’s product security posture externally when requiredWhat this role does not doDesign detailed system architecturesBuild or operate security toolingReview code or manage vulnerabilities day-to-dayDirectly manage security champions or software engineersYour profileRequired skills and experienceStrong understanding of product and cloud security in modern DevOps environmentsExperience working with security regulations and frameworks(ISO 27001, NIS2, SOC 2, NIST, FedRAMP, or similar)Proven ability to make and defend risk-based decisionsCredibility with senior engineering and product stakeholdersClear written and verbal communication, especially around trade-offsExperience profile8+ years in software engineering, product security, or security leadership rolesExperience in product-centric, engineering-driven organizationsExposure to regulated environments is strongly preferredSuccess looks likeSecurity expectations are clear and predictable for product and engineeringRisk acceptance is explicit, documented, and rarely escalated lateEngineering teams ship securely by default using platform guardrailsAudits and customer security reviews are uneventful and well-preparedWhat’s waiting for youWork that mattersThe technology we build at Materialise pushes the boundaries. You’ll find pride in building something that matters, whether you designed it, printed it, or shipped it. No matter your role, we unlock new possibilities to build a better and healthier world every day.At Materialise, we expect you to think about the customer, not just the task. You push for better solutions and care about the difference your work makes.A people-centered spaceWhen you join Materialise, you join a group of colleagues invested in you, not just your work. From your own team to a department across the world, you’ll find a sense of belonging with people who help without being asked, challenge you, and have your back.At the same time, we expect you to invest in the people around you — not just your own work — to make the group stronger than the sum of its parts.An environment of trustAs a company of innovators, we know how crucial autonomy is in your work. When we hire you, we trust in your expertise, giving you space to organize your tasks, work flexibly, and make your own calls.At Materialise, we expect you to deliver on that trust and keep your commitments.A career ready to buildWhen you see opportunities for your career to grow at Materialise, we encourage you to go for them. People shape a fulfilling career at their own pace here.At Materialise, we expect you to take initiative in your own development. Don’t wait for someone else to plan your career. Step into the space and make it count.Make a difference together with the Software team.