Product Cybersecurity Engineer

ROM Utrecht Region; Utrecht; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

ViCentra B.V. seeks a product cybersecurity engineer to secure connected medical devices for diabetes management. You will drive security across devices, apps, and supporting systems, embedding protections from design through deployment.

You will collaborate with product owners and engineering teams to translate threats into concrete requirements, ensuring compliance with IEC 81001-5-1, IEC 62304 and EU/US expectations. 3+ years in the field preferred, with BLE and medical device exposure a plus.

Qualifications

• 3+ years of experience in product cybersecurity.
• Experience with hardware and software security features across embedded devices, Android/iOS apps and cloud, and with Bluetooth Low Energy (BLE).
• Penetration testing experience and familiarity with the Radio Equipment Directive (RED) cybersecurity requirements are a plus.
• Exposure to the medical device industry is a plus.
• Translate identified threats and risks into technical cybersecurity requirements that support IEC 81001-5-1, IEC 62304 and applicable EU and FDA cybersecurity expectations.

Responsibilities

• Lead product cybersecurity analyses, including threat modelling, cybersecurity risk assessments and security concept reviews for devices, mobile apps and connected components.
• Partner with development teams to decide on and verify security mechanism implementations (secure boot, secure update, cryptographic key handling).
• Develop requirements, specifications, and test plans and protocols as needed.
• Perform and support security verification and validation, including coordinating penetration tests and documentation for quality systems and regulatory compliance.
• Support incident response, vulnerability handling, SBOM maintenance and post-market security monitoring per regulatory requirements.
• Create and maintain cybersecurity procedures, templates and work instructions guiding secure product development.

Skills

Cybersecurity

Risk management

Penetration testing

Communication

Problem-solving

Technical writing

Attention to detail

Proactive mindset

Collaboration

Compliance

Security verification

Software development

Job description

ViCentra B.V. designs innovative solutions for diabetes management, focusing on making life easier for people living with diabetes. By combining technological advancements with human-centred design, ViCentra empowers people to manage their condition with greater freedom and confidence. Its mission is guided by values such as boldness, trust, customer focus and excellence.

As a product cybersecurity engineer, you’ll ensure that connected medical devices for diabetes management are secure by design. You’ll drive cybersecurity engineering across devices, apps, and supporting systems, embedding security into software and hardware architectures to maintain safety, effectiveness, and compliance. Your role is crucial in building trust through design decisions and adapting to evolving regulatory expectations in the EU and US.

• Lead product security analyses, including threat modelling, cybersecurity risk assessments and security concept reviews for our devices, mobile apps and connected components
• Partner hands-on with development teams to decide on and verify the correct implementation of security mechanisms and controls, such as secure boot, secure update and cryptographic key handling
• Develop requirements, specifications, and software test plans and protocols where needed
• Perform and support security verification and validation, including coordinating penetration tests, and produce the associated quality system and regulatory documentation
• Support incident response, vulnerability handling, SBOM maintenance and post-market security monitoring in line with regulatory requirements
• Create and maintain the cybersecurity procedures, templates and work instructions that shape how we build secure products
• Collaborate with product owners, engineering teams, suppliers and external partners, communicating security risk clearly to technical and non-technical audiences alike
• Translate identified threats and risks into technical cybersecurity requirements that support compliance with IEC 81001-5-1, IEC 62304 and applicable EU and FDA cybersecurity expectations
• 3+ years of experience in product cybersecurity, including cybersecurity or safety management processes
• Experience with hardware and software security features across embedded devices, Android/iOS apps and cloud, and with Bluetooth Low Energy (BLE)
• Penetration testing experience and familiarity with the Radio Equipment Directive (RED) cybersecurity requirements are a plus
• Exposure to the medical device industry is a plus
• Creative freedom
• Supportive teamwork
• Room to lead initiatives
• Direct impact in people’s lives

Skills required for the job

Cybersecurity Risk management Penetration testing Communication Problem-solving Technical writing Attention to detail Proactive mindset Collaboration Compliance Security verification Software development