Product Security Engineer

Ambu A/S; Ballerup Kommune; On-site; DKK 700,000 - 1,000,000; Full time

Benefits offered by this job

Personal development opportunities

Wide range of employee benefits

Job summary

Ambu A/S in Denmark seeks a Product Security Engineer to embed cybersecurity across next-gen endoscopy systems and connected healthcare solutions. You will collaborate with software, electronics, quality, regulatory, and product development teams to integrate security throughout the lifecycle.

The role offers influence on architecture, risk management, SBOM governance, and post-market surveillance, helping protect patient safety while meeting global medical device cybersecurity standards.

Qualifications

• Educational background in Cybersecurity, CS, SE, Electronics or IT.
• Strong interest in product cybersecurity and secure development.
• Experience in regulated industries; medical device experience not required.
• Hands-on experience with design control, requirements management, risk management, and traceability.
• Knowledge of global cybersecurity regulations and standards.
• Understanding of networking, Linux, secure SDLC and core security concepts.
• Experience with system integration and complex hardware/software interactions.
• Strong analytical skills balancing depth with product decisions.
• Ability to work independently and drive progress with multiple stakeholders.

Responsibilities

• Drive cybersecurity activities throughout development and maintenance of endoscopic visualization platforms.
• Lead threat modelling workshops, security assessments, and architecture reviews.
• Define, document, and maintain cybersecurity requirements for product development projects.
• Own vulnerability monitoring, assessment, prioritization, and remediation coordination across development teams.
• Manage Software Bill of Materials (SBOM) generation, analysis, maintenance, and governance activities.
• Investigate and drive resolution of cybersecurity issues identified during development, verification, and post-market surveillance.
• Contribute to and help ensure compliance with applicable medical device cybersecurity regulations, standards, and industry best practices.
• Collaborate closely with software, systems, electronics, quality, and regulatory teams to integrate security into product development activities.
• Drive continuous improvement of Product Security processes, templates, guidance, and tools.
• Act as a cybersecurity subject matter expert for development projects and support teams in making risk-informed security decisions.
• Identify opportunities to strengthen product security posture and proactively initiate improvement activities.

Skills

Product cybersecurity

Threat modelling

Regulatory compliance

Networking fundamentals

Linux

Risk management

Stakeholder collaboration

Education

Background in Cybersecurity / Computer Science / Software Engineering or related field

Job description

Enhance the Security of Future Endoscopy Solutions

Are you passionate about cybersecurity and interested in protecting innovative medical technologies that help clinicians improve patient care?

We are looking for a Product Security Engineer to help build cybersecurity into the next generation of endoscopy systems and connected healthcare solutions.

This is an exciting opportunity to join a growing cybersecurity function and contribute directly to the security of products used by healthcare professionals worldwide.

In this role you will work closely with software, electronics, systems, quality, regulatory, and product development teams to ensure cybersecurity is integrated throughout the product lifecycle. You will have the opportunity to influence technical decisions, improve security practices, and make a tangible impact on both product security and patient safety.

Key Responsibilities

As a Product Security Engineer, you will drive cybersecurity activities throughout the development and maintenance of advanced endoscopic visualization platforms.

Your main responsibilities will include:

Drive cybersecurity risk management activities for medical devices throughout the product lifecycle.

Lead and facilitate threat modelling workshops, security assessments, and architecture reviews.

Define, document, and maintain cybersecurity requirements for product development projects.

Own vulnerability monitoring, assessment, prioritization, and remediation coordination across development teams.

Manage Software Bill of Materials (SBOM) generation, analysis, maintenance, and governance activities.

Investigate and drive resolution of cybersecurity issues identified during development, verification, and post-market surveillance.

Contribute to and help ensure compliance with applicable medical device cybersecurity regulations, standards, and industry best practices.

Collaborate closely with software, systems, electronics, quality, and regulatory teams to integrate security into product development activities.

Drive continuous improvement of Product Security processes, templates, guidance, and tools.

Act as a cybersecurity subject matter expert for development projects and support teams in making risk-informed security decisions.

Identify opportunities to strengthen product security posture and proactively initiate improvement activities.

Suggested candidate profile

Skills and experience can be gained in many ways, and we know the perfect profile cannot be prescribed on paper. You are, however, likely to succeed in this role if you bring many of the following:

An educational background within Cybersecurity, Computer Science, Software Engineering, Electronics Engineering, Information Technology, or a related field.

Strong interest in product cybersecurity and secure product development.

Experience working in a regulated industry is a great advantage; but medical device experience is not required.

Hands-on experience with design control, requirements management, risk management, and traceability.

Knowledge of compliance with global cybersecurity regulations and standards.

Good understanding of networking fundamentals, operating systems (Linux), secure software development practices, and fundamental cybersecurity concepts.

Experience with system integration and complex hardware/software/software interactions.

Strong analytical skills and the ability to balance technical depth with product-level decision-making.

The ability to work independently, structure complex work, and proactively drive progress across many stakeholders.

Comfortable navigating complex technical challenges and coordinating across multiple stakeholders.

Excellent collaboration and communication skills in a global, cross-functional environment.

Demonstrated ability to work independently, take ownership of deliverables, and drive activities to completion.

This is more than a product security role

You will help secure technologies that clinicians rely on every day to visualize, diagnose, and treat patients. Working within the Product Security Team, you will contribute to the development of products where cybersecurity directly supports patient safety, product reliability, and regulatory compliance. You will join a collaborative environment that values learning, innovation, and continuous improvement while helping establish cybersecurity as a key capability across the organization.

Ambu – a visionary and international workplace where your efforts matter

Ambu is a company that expands rapidly and has ambitious growth targets. We meet these targets through interdisciplinary teamwork between motivated and highly skilled employees. Your contributions and efforts are crucial to our success and by joining us you will get the opportunity to work in an international head office with an informal working environment.

We offer great opportunities for personal development. Furthermore, we offer a wide range of professional, social and financial employee benefits in addition to exciting job challenges and continuous professional and personal development.

About Ambu

Ambu has been bringing the solutions of the future to life since 1937. Today, millions of patients and healthcare professionals worldwide depend on the efficiency, safety and performance of our single-use endoscopy, anaesthesia, and patient monitoring solutions. We continuously look to the future with a commitment to deliver innovative quality products that have a positive impact on patient care and the work of healthcare professionals. Headquartered near Copenhagen in Denmark, Ambu employs approximately 4,500 people in Europe, North America and the Asia Pacific.