Product Security Specialist

Cognitive Group | Part of the Focus Cloud Group; Greater London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Product Security Specialist to enhance the security strategy for IoT medical devices. This role involves collaborating with product teams to ensure secure design and development, while implementing best practices to protect sensitive healthcare data. The ideal candidate will leverage their extensive experience in IoT security and compliance frameworks to assess risks and guide teams through security testing and threat modeling. Join a forward-thinking team dedicated to innovation and excellence in healthcare technology, where your expertise will make a significant impact.

Qualifications

• 8+ years in IoT security, especially in medical devices.
• Expertise in security frameworks and compliance standards.

Responsibilities

• Define objectives and set timelines for product security initiatives.
• Evaluate security risks and propose remediation solutions.

Skills

IoT Security

Security Frameworks (NIST, OWASP)

Penetration Testing

Compliance (HIPAA, GDPR)

Client Relationship Management

Education

Cybersecurity Certifications (CISSP, CISM)

Tools

Quality Management Systems (QMS)

Job description

3 days ago Be among the first 25 applicants

Direct message the job poster from Cognitive Group | Part of the Focus Cloud Group

We are seeking a Product Security Specialist with expertise in connected / IoT medical devices or healthcare products to join our team.

The ideal candidate will work with clients to advise and shape the overall security strategy for products, ensure secure design, development, and deployment across the entire product lifecycle, and implement industry best practices to protect sensitive healthcare data.

Key Responsibilities

• Collaborate with client product teams and functional groups to define objectives, establish scope, and set timelines for critical product security initiatives, as well as design delivery approaches.
• Evaluate security risks across client product portfolios and propose remediation solutions that align both technical requirements and business goals.
• Provide guidance on coding practices, threat modeling, and security testing strategies for embedded systems and IoT devices, ensuring adherence to relevant industry regulations.
• Partner with client R&D teams to drive secure code reviews, conduct threat modeling, perform security risk and vulnerability assessments, and validate security controls.
• Stay informed on emerging cybersecurity threats within the IoT and medical device sectors and develop thought leadership content to represent PA’s expertise and viewpoint.
• Establish and nurture strong relationships with key stakeholders across client organizations.
• Promote team development by supporting training initiatives and delivering high-quality outcomes.
• Lead projects with confidence, applying a consultative approach to address challenges and deliver solutions.

Required Skills & Experience

• 8+ years of hands-on experience in IoT security, ideally within the medical device or pharmaceutical sectors.
• Expertise in security frameworks (such as NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and familiarity with standards including FDA cybersecurity guidance.
• Demonstrated ability to assess security risks through recognized methods (e.g., penetration testing, threat modeling, security testing) and evaluate residual risks with compensating controls.
• Solid experience in applying and proving compliance with frameworks like NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2, as well as working with Quality Management Systems (QMS).
• Strong record of delivering results and cultivating client relationships.
• Skilled in developing business opportunities, including preparing proposals and identifying growth areas within the client portfolio.
• Holds relevant cybersecurity certifications such as CISSP, CSSLP, or CISM.

Preferred Qualifications

• Proven ability to author thought leadership pieces and deliver insights on new and emerging security developments.
• Background in consulting, with an emphasis on strategic problem-solving and driving successful outcomes.

For further information, please contact [e-mail]

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Staffing and Recruiting

Referrals increase your chances of interviewing at Cognitive Group | Part of the Focus Cloud Group by 2x

Sign in to set job alerts for “Product Security Specialist” roles.

London, England, United Kingdom 1 week ago

Greater London, England, United Kingdom 3 weeks ago

Alton, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 weeks ago

Alton, England, United Kingdom 2 weeks ago

Hemel Hempstead, England, United Kingdom 2 weeks ago

Manchester, England, United Kingdom 2 weeks ago

Alton, England, United Kingdom 1 week ago

Sudbury, England, United Kingdom 1 day ago

London, England, United Kingdom 4 days ago

Warrington, England, United Kingdom 2 weeks ago

Alton, England, United Kingdom 1 week ago

Hampshire, England, United Kingdom 1 week ago

Gillingham, England, United Kingdom 2 weeks ago

SPI : Engineering Welding and Fabrication (Ref: 5683)

Sudbury, England, United Kingdom 20 hours ago

Woodwork wood assembly joiner (Ref: 4322)

Bristol, England, United Kingdom 1 day ago

Specialist Production Instructor Laundry (Ref: 5536)

Stafford, England, United Kingdom 1 week ago

Hampshire, England, United Kingdom 1 week ago

Alton, England, United Kingdom 1 week ago

Alton, England, United Kingdom 3 days ago

Ledbury, England, United Kingdom 5 days ago

Alton, England, United Kingdom 6 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.