Product Security Architect (All Genders)

Philips; Unterschleißheim; On-site; EUR 81,000 - 108,000; Full time

Job summary

Philips in Munich, part of the Ultrasound Workspace engineering team, strengthens product security across the medical software lifecycle. The role partners with engineering, quality, and security to guide secure development, threat modeling, and verification, ensuring audit-ready evidence.

You will drive lifecycle security improvements, plan assessments, and coordinate issues across stakeholders to deliver safe, compliant medical software. Fluency in German/English is preferred.

Qualifications

• Bachelor’s or Master’s degree in CS/Engineering or comparable discipline.
• Hands-on software development and coding experience is expected.
• Experience in product or application security for regulated software.
• Experience in regulated environments with quality management systems and audits.
• Strong analytical and communication skills with stakeholders.
• Structured, evidence-based, pragmatic working style and initiative.
• Security certifications (CISSP, CISM, CSSLP) are an advantage.

Responsibilities

• Plan and oversee product security assessments including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification.
• Evaluate threats and vulnerabilities for product, patient-safety, privacy, regulatory impact, and ensure mitigations are documented.
• Monitor emerging threats, attack methods, technologies, and security tooling; provide risk-based recommendations.
• Coordinate product security issues and incidents from intake to remediation and lessons learned.
• Guide the engineering team on security topics; contribute hands-on to fixes and tooling.
• Drive lifecycle security improvements through actions, training, gates, and verification.
• Own and improve security processes, templates, and audit-ready evidence aligned with quality management.

Skills

Hands-on coding

Analytical skills

Communication skills

Proactive mindset

Structured approach

Education

Bachelor's/Master's degree in CS/Engineering

Tools

Secure development tooling

Job description

Job Title

Product Security Architect (All Genders)

Job Description

As part of our Munich-based Ultrasound Workspace engineering team, you will strengthen product security across the medical software lifecycle. Collaborating across functions, you will manage security risks, guide secure development, coordinate issues, and continuously improve security processes by evaluating and implementing state-of-the-art methods and ways of working, while maintaining audit-ready evidence aligned with Philips standards. You will plan and oversee product security assessments, including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification. You will evaluate security risks and emerging threats, define proportionate mitigations, and ensure decisions and evidence remain documented and traceable. You will coordinate security issues and incidents and drive lifecycle improvements through secure development guidance, reviews, training, quality gates, and verification of outcomes. Working across product, engineering, quality, and security functions, you will actively evolve audit-ready processes and evidence, identify improvement opportunities, and introduce state-of-the-art methods and ways of working while strengthening application-security and medical-device cybersecurity expertise.

The team’s working language is German and English. If you don't know German – a desire to learn is appreciated.

Your role

Plan and oversee product security assessments, including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification. Evaluate threats and vulnerabilities for product, patient-safety, privacy, operational, and regulatory impact, and ensure mitigations, decisions, and evidence are documented and traceable. Monitor emerging threats, attack methods, technologies, third-party components, and security tools, and provide leadership with risk-based recommendations and improvement priorities. Coordinate product security issues and incidents raised by internal or external stakeholders, from intake and investigation through communication, remediation, updates, and lessons learned. Support and guide the engineering team on security topics, contributing hands-on to the implementation of security controls, fixes, and tooling where needed. Drive lifecycle security improvements through corrective and preventive actions, secure coding guidance, design and code reviews, training, security tooling, quality gates, and verification of outcomes. Own and continuously improve security processes, procedures, templates, work instructions, and audit-ready evidence in alignment with the quality management system.

You’re the right fit if

• A Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security, Electrical Engineering, or a comparable discipline.
• Hands-on software development and coding experience is expected, enabling you to review code and engage with engineering teams at a technical level.
• Experience in product or application security for regulated or safety-critical software, covering secure architecture, risk and vulnerability management, testing, secure development practices and tooling, with the ability to provide actionable guidance to engineering teams.
• Having worked in a regulated environment Experience creating and improving controlled quality management system processes, procedures, and work instructions, and supporting internal and external audits or assessments by notified bodies, regulators, customers, or certification organizations.
• Strong analytical and communication skills, with the ability to support technical and non-technical stakeholders.
• A structured, evidence-based, and pragmatic working style, with a proactive mindset, and the initiative to identify needs and to actively drive improvements forward.
• Relevant security certifications, such as CISSP, CISM, CSSLP, or comparable credentials, are an advantage.

Compensation & benefits

You combine strong technical expertise with a proactive and structured working style. You are comfortable coordinating stakeholders from different disciplines, making sound engineering decisions, and driving change in a complex, quality-driven environment. Most importantly, you are motivated by contributing to products that help clinicians deliver better care and improve patient outcomes worldwide. Doing meaningful work should come with fair, transparent rewards. The base salary range for this role is € 81,216.25 – €108,288.31. We determine pay within the range using objective factors, like the skills the role requires, your relevant experience and the responsibility you'll have in this role, alongside internal equity and local market considerations.

How we work together

We believe that we are better together than apart. For our office-based teams, this means working in-person at least 3 days per week. Onsite roles require full-time presence in the company’s facilities. Field roles are most effectively done outside of the company’s main facilities, generally at the customers’ or suppliers’ locations.

About Philips

Are you ready to do the work of your life to help the lives of others? Learn more about our business, discover our rich and exciting history and learn more about our purpose.

Equal opportunity statement

It is the policy of Philips to provide equal employment and advancement opportunities to all qualified employees and applicants for employment without regard to race, color, religion, sex, pregnancy/childbirth or related medical conditions, age, ethnic or national origin, sexual orientation, gender identity or expression, physical or mental disability, genetic information, citizenship status, veteran or military status, marital or domestic partner status or any other characteristic protected by law. As an equal opportunity employer, Philips is committed to fostering a culture where all are treated with respect and professionalism. To ensure reasonable accommodations for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Veterans' Readjustment Act of 1974 and Title I of the Americans with Disabilities Act of 1990, applicants that require accommodation in the job application process may contact 888-367-7223, option 5, for assistance. Philips is an Equal Employment and Opportunity Employer including Disability/Vets and maintains a drug-free workplace. Know Your Rights