Product Security Engineer

Ambu; Ballerup; Hybrid; DKK 700,000 - 950,000; Full time

Job summary

Ambu is seeking a Product Security Engineer to embed cybersecurity into next-gen endoscopy systems and connected healthcare solutions. The role collaborates with software, electronics, systems, quality, regulatory, and product teams to ensure security is integrated across the lifecycle.

Based in Augsburg or Ballerup, it follows a hybrid model with three days in the office and two from home. You will drive cybersecurity activities, lead threat modelling workshops, define security requirements,

Qualifications

• Educational background in cybersecurity, CS, software/engineering, or related field.
• Experience with regulated industries beneficial; medical devices not required.
• Hands-on with design control, requirements, risk, and traceability.
• Knowledge of global cybersecurity regulations and standards.

Responsibilities

• Drive cybersecurity activities across development and maintenance of endoscopy visualization platforms.
• Lead threat modelling, security assessments, and architecture reviews.
• Define and maintain cybersecurity requirements for projects.
• Own vulnerability monitoring, assessment, prioritization, and remediation coordination.

Skills

Cybersecurity

Secure development

Regulated industry experience

Requirements management

Risk management

Networking fundamentals

Linux

Stakeholder coordination

Team collaboration

Independent work

Education

Bachelor's degree in CS/Engineering

Tools

SBOM tooling

Job description

Enhance the Security of Future Endoscopy Solutions

Are you passionate about cybersecurity and interested in protecting innovative medical technologies that help clinicians improve patient care?

We are looking for a Product Security Engineer to help build cybersecurity into the next generation of endoscopy systems and connected healthcare solutions.

This is an exciting opportunity to join a growing cybersecurity function and contribute directly to the security of products used by healthcare professionals worldwide.

In this role you will work closely with software, electronics, systems, quality, regulatory, and product development teams to ensure cybersecurity is integrated throughout the product lifecycle. You will have the opportunity to influence technical decisions, improve security practices, and make a tangible impact on both product security and patient safety.

We believe the best ideas come from a mix of in-person collaboration and focused individual work. That's why this role is based in Augsburg or Ballerup and follows a hybrid working model, with three days per week in the office and two days working from home.

Key Responsibilities

As a Product Security Engineer, you will drive cybersecurity activities throughout the development and maintenance of advanced endoscopic visualization platforms.

Your Main Responsibilities Will Include

• Drive cybersecurity risk management activities for medical devices throughout the product lifecycle.
• Lead and facilitate threat modelling workshops, security assessments, and architecture reviews.
• Define, document, and maintain cybersecurity requirements for product development projects.
• Own vulnerability monitoring, assessment, prioritization, and remediation coordination across development teams.
• Manage Software Bill of Materials (SBOM) generation, analysis, maintenance, and governance activities.
• Investigate and drive resolution of cybersecurity issues identified during development, verification, and post-market surveillance.
• Contribute to and help ensure compliance with applicable medical device cybersecurity regulations, standards, and industry best practices.
• Collaborate closely with software, systems, electronics, quality, and regulatory teams to integrate security into product development activities.
• Drive continuous improvement of Product Security processes, templates, guidance, and tools.
• Act as a cybersecurity subject matter expert for development projects and support teams in making risk-informed security decisions.
• Identify opportunities to strengthen product security posture and proactively initiate improvement activities.

Suggested candidate profile

Skills

Skills and experience can be gained in many ways, and we know the perfect profile cannot be prescribed on paper. You are, however, likely to succeed in this role if you bring many of the following:

• An educational background within Cybersecurity, Computer Science, Software Engineering, Electronics Engineering, Information Technology, or a related field.
• Strong interest in product cybersecurity and secure product development.
• Experience working in a regulated industry is a great advantage; but medical device experience is not required.
• Hands-on experience with design control, requirements management, risk management, and traceability.
• Knowledge of compliance with global cybersecurity regulations and standards.
• Good understanding of networking fundamentals, operating systems (Linux), secure software development practices, and fundamental cybersecurity concepts.
• Experience with system integration and complex hardware/software/software interactions.
• Strong analytical skills and the ability to balance technical depth with product-level decision-making.
• The ability to work independently, structure complex work, and proactively drive progress across many stakeholders.
• Comfortable navigating complex technical challenges and coordinating across multiple stakeholders.
• Excellent collaboration and communication skills in a global, cross-functional environment.
• Demonstrated ability to work independently, take ownership of deliverables, and drive activities to completion.

This is more than a product security role

You will help secure technologies that clinicians rely on every day to visualize, diagnose, and treat patients. Working within the Product Security Team, you will contribute to the development of products where cybersecurity directly supports patient safety, product reliability, and regulatory compliance. You will join a collaborative environment that values learning, innovation, and continuous improvement while helping establish cybersecurity as a key capability across the organization.

Ambu – a visionary and international workplace where your efforts matter

Ambu is a company that expands rapidly and has ambitious growth targets. We meet these targets through interdisciplinary teamwork between motivated and highly skilled employees. Your contributions and efforts are crucial to our success and by joining us you will get the opportunity to work in an international head office with an informal working environment.

We offer great opportunities for personal development. Furthermore, we offer a wide range of professional, social and financial employee benefits in addition to exciting job challenges and continuous professional and personal development.