Lead Product Cybersecurity Engineer for Connected Medical Devices

ROM Utrecht Region; Utrecht; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

ViCentra B.V. seeks a product cybersecurity engineer to secure connected medical devices for diabetes management. You will drive security across devices, apps, and supporting systems, embedding protections from design through deployment.

You will collaborate with product owners and engineering teams to translate threats into concrete requirements, ensuring compliance with IEC 81001-5-1, IEC 62304 and EU/US expectations. 3+ years in the field preferred, with BLE and medical device exposure a plus.

Qualifications

• 3+ years of experience in product cybersecurity.
• Experience with hardware and software security features across embedded devices, Android/iOS apps and cloud, and with Bluetooth Low Energy (BLE).
• Penetration testing experience and familiarity with the Radio Equipment Directive (RED) cybersecurity requirements are a plus.
• Exposure to the medical device industry is a plus.
• Translate identified threats and risks into technical cybersecurity requirements that support IEC 81001-5-1, IEC 62304 and applicable EU and FDA cybersecurity expectations.

Responsibilities

• Lead product cybersecurity analyses, including threat modelling, cybersecurity risk assessments and security concept reviews for devices, mobile apps and connected components.
• Partner with development teams to decide on and verify security mechanism implementations (secure boot, secure update, cryptographic key handling).
• Develop requirements, specifications, and test plans and protocols as needed.
• Perform and support security verification and validation, including coordinating penetration tests and documentation for quality systems and regulatory compliance.
• Support incident response, vulnerability handling, SBOM maintenance and post-market security monitoring per regulatory requirements.
• Create and maintain cybersecurity procedures, templates and work instructions guiding secure product development.

Skills

Cybersecurity

Risk management

Penetration testing

Communication

Problem-solving

Technical writing

Attention to detail

Proactive mindset

Collaboration

Compliance

Security verification

Software development

Job description

ViCentra B.V. seeks a product cybersecurity engineer to secure connected medical devices for diabetes management. You will drive security across devices, apps, and supporting systems, embedding protections from design through deployment.

You will collaborate with product owners and engineering teams to translate threats into concrete requirements, ensuring compliance with IEC 81001-5-1, IEC 62304 and EU/US expectations. 3+ years in the field preferred, with BLE and medical device exposure a plus.