Product Security Specialist

ScreenPoint Medical; Nijmegen; On-site; EUR 75,000 - 110,000; Full time

Job summary

ScreenPoint Medical is seeking a Product Security Specialist to own security across the Transpara software lifecycle and platform. This senior, independent role ensures the product remains secure, resilient, and trusted by customers, regulators and patients.

You will shape architecture, engineering practices and security strategy at the AI-cloud-medical device intersection, securing a globally used product. This is a fast-moving, mission-driven environment.

Qualifications

• Experience in medical device software, regulated software, or AI/ML-enabled products.
• Familiarity with IEC 62304, ISO 14971, ISO 27001/2, FDA cybersecurity guidance, EU MDR, NIS2, OWASP, or NIST SSDF.
• Experience supporting enterprise security reviews or coordinated vulnerability disclosure processes.
• Relevant certifications such as CISSP, CSSLP, OSCP, GWAPT, CCSP, or similar.

Responsibilities

• Own and evolve ScreenPoint Medical's Secure Development Lifecycle policy and ensure it is embedded in engineering workflows.
• Drive vulnerability management end-to-end: intake, triage, risk assessment, remediation tracking, and disclosure.
• Manage the penetration testing programme: scoping, vendor coordination, findings review, and remediation follow-up.
• Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, secrets detection, and container scanning.
• Address software supply chain risks: SBOM processes, open-source dependency management, and secure build and release practices.
• Lead threat modelling, secure design reviews, and security risk assessments for new and existing product features.
• Support secure cloud and platform architecture through practical security-by-design guidance.
• Support customer security reviews, questionnaires, and technical security discussions.
• Define and track product security metrics and report to leadership.
• Influence technical and architectural decisions across Product and Engineering, without formal authority.
• Use AI tools thoughtfully and securely to support research, analysis, documentation, and security workflows.

Skills

Secure SDLC

Vulnerability management

Penetration testing

Cloud security

AI security tooling

Security architecture

Regulatory compliance

Tools

SAST

DAST

SCA

SBOM

Container security

Threat modelling

Job description

In the fight against breast cancer, every medical image is an opportunity: to unlock insight, to uncover risk, to embody health, to empower life. ScreenPoint's Transpara Breast AI delivers unmatched precision for breast radiologists and helps define personalized care pathways for every woman we serve. Make your mark as part of The Breast AI Company.

We are looking for a Product Security Specialist to own product security across ScreenPoint Medical's software development lifecycle. This is an independent senior role in the Product organization with a clear mandate: keep Transpara and its platform secure, resilient, and trusted by customers, partners, regulators, and patients.

This is a hands‑on product security role in which you will help shape our architecture, engineering practices and product security strategy. You will work at the intersection of AI, cloud technology and medical device software, securing a globally used product that supports the early detection of breast cancer.

As an AI‑native company, we are looking for someone who is positive about the opportunities AI creates and comfortable using AI tools responsibly to improve the quality, speed, and effectiveness of their work.

Key responsibilities

• Own and evolve ScreenPoint Medical's Secure Development Lifecycle policy and ensure it is embedded in engineering workflows.
• Drive vulnerability management end‑to‑end: intake, triage, risk assessment, remediation tracking, and disclosure.
• Manage the penetration testing programme: scoping, vendor coordination, findings review, and remediation follow‑up.
• Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, secrets detection, and container scanning.
• Address software supply chain risks: SBOM processes, open‑source dependency management, and secure build and release practices.
• Lead threat modelling, secure design reviews, and security risk assessments for new and existing product features.
• Support secure cloud and platform architecture through practical security‑by‑design guidance.
• Support customer security reviews, questionnaires, and technical security discussions.
• Define and track product security metrics and report to leadership.
• Influence technical and architectural decisions across Product and Engineering, without formal authority.
• Use AI tools thoughtfully and securely to support research, analysis, documentation, and security workflows.

Job requirements

You are a pragmatic, independent security professional who can build structure from scratch in a fast‑moving, mission‑driven environment. You combine hands‑on technical depth with the communication skills to translate security requirements into guidance that teams can act on. You are AI‑native in how you work — using AI tools as a force multiplier to research, build, and communicate — and comfortable in a scale‑up where processes are still evolving and your ownership makes a real difference.

You are genuinely interested in the product and clinical domain and want to understand what you are securing, not just run the tooling.

Preferred qualifications

• Experience in medical device software, regulated software, or AI/ML‑enabled products.
• Familiarity with IEC 62304, ISO 14971, ISO 27001/2, FDA cybersecurity guidance, EU MDR, NIS2, OWASP, or NIST SSDF.
• Experience supporting enterprise security reviews or coordinated vulnerability disclosure processes.
• Relevant certifications such as CISSP, CSSLP, OSCP, GWAPT, CCSP, or similar.

Join ScreenPoint and bring your product security expertise to a team building AI that genuinely improves breast cancer detection outcomes worldwide.

This is an opportunity to take real ownership of product security and directly influence how a globally used AI medical device is designed, built and secured.

About us

ScreenPoint Medical is a leading company that develops and markets breast image analysis and cutting‑edge machine learning applications and services. Our product Transpara improves breast cancer survival rates by detecting cancers earlier so that treatment can be more effective and less invasive.

Do you want to help us build an innovative solution to improve health worldwide? And do you want to be part of an ambitious and fast‑growing team who help you develop your career further?

Providing a Certificate of Conduct (VOG) or background check is part of our application procedure. Questions about the contents of the vacancy or the recruitment process at ScreenPoint Medical? Please send an email to [e-mail].