Product Security Risk Analyst

SQUAD - Cabinet de conseils et d’expertises; Spain; Remote; EUR 45,000 - 60,000; Full time

Benefits offered by this job

Remote work

Job summary

SQUAD Group is hiring a Product Security Risk Analyst to perform SRAs on R&D medical device products, aligning with AAMI TIR57:2016 and IEC 62304 considerations. The role supports a global leader in in vitro diagnostics and is 100% remote.

You will gather requirements, scope assessments, run workshops, analyze architecture changes, and report results to stakeholders, contributing to KPI tracking and monthly reviews.

Qualifications

• 3+ years in product security or risk analysis.
• Degree or Master’s in engineering, CS or cybersecurity.
• Hands-on experience with AAMI TIR57:2016.
• Solid knowledge of IEC 62304 for medical device software lifecycle.
• Proven experience conducting Product Security Risk Assessments.
• Ability to facilitate technical workshops and communicate findings to R&D teams.
• Strong analytical and technical writing skills.
• Fluent English; French is a strong plus.
• Experience in medical devices/healthcare is a plus.

Responsibilities

• Gather requirements from the client’s Cybersecurity R&D Center of Expertise.
• Scope and plan Product Security assessments.
• Prepare and lead workshops with R&D teams.
• Perform the various categories of Security Risk Assessments requested.
• Analyze the cybersecurity impact of architecture changes.
• Integrate vulnerability scanner results into the risk analysis.
• Create, update, and review SRAs.
• Present and report assessment results to stakeholders.
• Contribute to KPI tracking.
• Participate in the monthly committee with the Cybersecurity R&D Center of Expertise.

Skills

Product security

Security risk analysis

Workshop facilitation

Analytical writing

Stakeholder communication

English fluency

French a plus

Education

Engineering degree

Master's in CS/Cybersecurity

Job description

Product Security Risk Analyst (AAMI TIR57 / IEC 62304) - 100% Remote

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seeking a Product Security Risk Analysis Expert based in Spain to support a global leader in in vitro diagnostics. You'll perform Security Risk Assessments (SRAs) on R&D medical device products throughout their lifecycle, based on AAMI TIR57:2016 and taking IEC 62304 into account for software aspects.

Responsibilities:

• Gather requirements from the client's Cybersecurity R&D Center of Expertise.
• Scope and plan Product Security assessments.
• Prepare and lead workshops with R&D teams.
• Perform the various categories of Security Risk Assessments requested.
• Analyze the cybersecurity impact of architecture changes.
• Integrate vulnerability scanner results into the risk analysis.
• Create, update, and review SRAs.
• Present and report assessment results to stakeholders.
• Contribute to KPI tracking.
• Participate in the monthly committee with the Cybersecurity R&D Center of Expertise.

Required Skills & Qualifications:

• Minimum 3 years of experience in product security or security risk analysis.
• Degree or Master's in engineering, computer science, or cybersecurity.
• Hands-on experience with AAMI TIR57:2016.
• Solid knowledge of IEC 62304 (medical device software lifecycle).
• Proven experience conducting Product Security Risk Assessments.
• Ability to facilitate technical workshops and communicate findings to R&D teams.
• Strong analytical and technical writing skills.
• Fluent English; French is a strong plus.
• Experience in the medical device or healthcare industry is a plus (e.g., FDA premarket cybersecurity guidance, ISO 14971, IEC 81001-5-1).

Why Join Squad?

• Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.
• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.