592636 Product Security Architect (All Genders)

Philips Deutschland GmbH; München; On-site; EUR 81,000 - 108,000; Full time

Job summary

Philips Deutschland GmbH in Munich seeks a security-focused professional to strengthen product security across the medical software lifecycle. You will plan assessments, guide secure development, and drive improvements with audit-ready evidence in line with Philips standards.

The role requires hands-on development experience, experience in regulated software, and strong analytical skills. German and English collaboration is expected, with opportunities to lead security across teams and ensure

Qualifications

• Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security, Electrical Engineering or comparable discipline.
• Hands-on software development and coding experience is expected, enabling you to review code with engineers.
• Experience in product or application security for regulated or safety-critical software.
• Having worked in a regulated environment.
• Experience creating and improving controlled quality management system processes, procedures and work instructions, and supporting audits.
• Strong analytical and communication skills with a proactive mindset and ability to drive improvements.
• Security certifications such as CISSP, CISM, CSSLP or comparable credentials are an advantage.

Responsibilities

• Plan and oversee product security assessments, including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification.
• Evaluate threats and vulnerabilities for product, patient-safety, privacy, operational, and regulatory impact, and ensure mitigations and evidence are traceable.
• Monitor emerging threats, attack methods, technologies, third-party components, and provide risk-based recommendations.
• Coordinate security issues and incidents from intake to remediation and lessons learned.
• Support and guide engineering on security topics and contribute hands-on to security controls and tooling.
• Drive lifecycle security improvements through actions, training, tooling, and quality gates.
• Own and continuously improve security processes and audit-ready evidence in line with quality management.
• Collaborate across product, engineering, quality to maintain current app-security and medical-device cybersecurity expertise.

Skills

Hands-on software development

Secure coding practices

Analytical communication

Education

Bachelor's or Master's in CS/Engineering/Cybersecurity/Information Security

Job description

As part of our Munich-based Ultrasound Workspace engineering team, you will strengthen product security across the medical software lifecycle.

Collaborating across functions, you will manage security risks, guide secure development, coordinate issues, and continuously improve security processes by evaluating and implementing state-of-the-art methods and ways of working, while maintaining audit-ready evidence aligned with Philips standards.

You will plan and oversee product security assessments, including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification.

You will evaluate security risks and emerging threats, define proportionate mitigations, and ensure decisions and evidence remain documented and traceable.

You will coordinate security issues and incidents and drive lifecycle improvements through secure development guidance, reviews, training, quality gates, and verification of outcomes.

Working across product, engineering, quality, and security functions, you will actively evolve audit-ready processes and evidence, identify improvement opportunities, and introduce state-of-the-art methods and ways of working while strengthening application-security and medical-device cybersecurity expertise.

The team’s working language is German and English. If you don't know German – a desire to learn is appreciated.

Your role:

• Plan and oversee product security assessments, including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification.
• Evaluate threats and vulnerabilities for product, patient-safety, privacy, operational, and regulatory impact, and ensure mitigations, decisions, and evidence are documented and traceable.
• Monitor emerging threats, attack methods, technologies, third-party components, and security tools, and provide leadership with risk-based recommendations and improvement priorities.
• Coordinate product security issues and incidents raised by internal or external stakeholders, from intake and investigation through communication, remediation, updates, and lessons learned.
• Support and guide the engineering team on security topics, contributing hands‑on to the implementation of security controls, fixes, and tooling where needed.
• Drive lifecycle security improvements through corrective and preventive actions, secure coding guidance, design and code reviews, training, security tooling, quality gates, and verification of outcomes.
• Own and continuously improve security processes, procedures, templates, work instructions, and audit‑ready evidence in alignment with the quality management system. Evaluate and implement state‑of‑the‑art methods, tools, and ways of working to keep them effective and current.
• Collaborate across product, engineering, quality and maintain current application‑security and medical‑device cybersecurity expertise.

You're the right fit if:

• A Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security, Electrical Engineering, or a comparable discipline.
• Hands‑on software development and coding experience is expected, enabling you to review code and engage with engineering teams at a technical level.
• Experience in product or application security for regulated or safety‑critical software, covering secure architecture, risk and vulnerability management, testing, secure development practices and tooling, with the ability to provide actionable guidance to engineering teams.
• Having worked in a regulated environment
• Experience creating and improving controlled quality management system processes, procedures, and work instructions, and supporting internal and external audits or assessments by notified bodies, regulators, customers, or certification organizations.
• Strong analytical and communication skills, with the ability to support technical and non‑technical stakeholders.
• A structured, evidence‑based, and pragmatic working style, with a proactive mindset, and the initiative to identify needs and to actively drive improvements forward.
• Relevant security certifications, such as CISSP, CISM, CSSLP, or comparable credentials, are an advantage.

Compensation & benefits

You combine strong technical expertise with a proactive and structured working style. You are comfortable coordinating stakeholders from different disciplines, making sound engineering decisions, and driving change in a complex, quality‑driven environment. Most importantly, you are motivated by contributing to products that help clinicians deliver better care and improve patient outcomes worldwide.

Doing meaningful work should come with fair, transparent rewards. The base salary range for this role is € 81,216.25 – €108,288.31.

We determine pay within the range using objective factors, like the skills the role requires, your relevant experience and the responsibility you'll have in this role, alongside internal equity and local market considerations.

How we work together

We believe that we are better together than apart. For our office‑based teams, this means working in‑person at least 3 days per week. Onsite roles require full‑time presence in the company’s facilities. Field roles are most effectively done outside of the company’s main facilities, generally at the customers’ or suppliers’ locations.

About Philips

Are you ready to do the work of your life to help the lives of others? Learn more about our business, discover our rich and exciting history and learn more about our purpose. You may still be the right candidate for this or other opportunities at Philips. Learn more about our culture of impact with care.