Senior Product Security Engineer - Remote (Spain/Portugal)

Ambit Iberia; Évora; Remote; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Salary package discussed

Permanent contract

Learning & Development

Friend Referral Program

Job summary

Ambit Iberia is seeking a Senior Product Security Engineer to strengthen security across medical devices and healthcare platforms. You will lead threat modeling, risk assessments, and vulnerability management, collaborating with software, cloud, and incident response teams to implement robust controls throughout the lifecycle.

You will coordinate external security testing, contribute to playbooks, and stay ahead of regulatory requirements (ISO 27000, GDPR) while mentoring peers in an

Qualifications

• Bachelor’s degree in Engineering, Computer Science, or a related field.
• 7+ years of experience in Security Engineering, Product Security, Application Security, Vulnerability Management, or related areas.
• Hands-on experience with software development teams and Cloud platforms.
• Strong experience in Threat Modeling and Cybersecurity Risk Assessment.
• Vulnerability analysis and remediation strategies.
• Practical experience with SCA, SAST, DAST, IaC, and/or Penetration Testing.
• Good understanding of Application Security and SDLC.
• Experience in Healthcare, Medical Devices, or other regulated industries.
• Knowledge of ISO 27000, FDA Guidance, MDGC, HITRUST, and GDPR.

Responsibilities

• Define technical security and privacy requirements for products, medical devices, and healthcare solutions.
• Conduct Threat Modeling and Cybersecurity Risk Assessments to identify threats, vulnerabilities, and potential impacts.
• Analyze product security posture and define appropriate risk mitigation measures.
• Design and maintain security and privacy controls throughout the product lifecycle.
• Manage and assess vulnerabilities during pre-market and post-market activities.
• Assess vulnerabilities identified through SCA, SAST, DAST, IaC, Penetration Testing, and other security testing activities.
• Provide technical input into remediation plans and follow up on remediation activities.
• Investigate complex security issues and provide technical recommendations.
• Support Security Incident Response and forensic activities together with specialized security teams.
• Technically coordinate external security testing activities, including penetration testing, validation of findings, and remediation follow-up.
• Develop and maintain technical documentation, processes, playbooks, and Product Security tools.
• Stay up to date with emerging security threats, technologies, and best practices.
• Act as a technical reference for Product Security, sharing knowledge and supporting less experienced security professionals.

Skills

Threat Modeling

Cybersecurity Risk Assessment

Vulnerability Management

Cloud platforms

Application Security

Healthcare security

ISO 27000 / GDPR compliance

Cross-functional collaboration

Communications in English

Education

Bachelor’s degree in Engineering, Computer Science, or related field

Tools

SCA

SAST

DAST

IaC

Penetration Testing

Job description

Ambit Iberia is seeking a Senior Product Security Engineer to strengthen security across medical devices and healthcare platforms. You will lead threat modeling, risk assessments, and vulnerability management, collaborating with software, cloud, and incident response teams to implement robust controls throughout the lifecycle.

You will coordinate external security testing, contribute to playbooks, and stay ahead of regulatory requirements (ISO 27000, GDPR) while mentoring peers in an