Senior Product Security Engineer – Pharma

Ambit Iberia

. Define technical security and privacy requirements for products, medical devices, and healthcare solutions .

Posted 9/29/2026full-timeRemote • Spain, PortugalSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining technical security and privacy requirements for healthcare products, conducting threat modeling, and performing cybersecurity risk assessments. Proficient in vulnerability management and remediation strategies, with a strong understanding of application security throughout the software development lifecycle.

Highest-signal resume keywords

Threat ModelingCybersecurity Risk AssessmentVulnerability ManagementApplication SecurityISO 27000

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringVulnerability AnalysisSCASASTDASTIaCPenetration TestingRisk MitigationTechnical DocumentationSecurity Controls

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsCollaboration Skills

Tools & Technologies

Product Security ToolsCloud Platforms

Industry Keywords

HealthcareMedical DevicesRegulated IndustriesFDA GuidanceHITRUSTGDPR

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Define technical security and privacy requirements for products, medical devices, and healthcare solutions
Conduct Threat Modeling and Cybersecurity Risk Assessments
Analyze product security posture and define risk mitigation measures
Design and maintain security and privacy controls throughout the product lifecycle
Manage and assess vulnerabilities during pre-market and post-market activities
Assess vulnerabilities identified through SCA, SAST, DAST, IaC, Penetration Testing, and other security testing activities
Provide technical input into remediation plans and follow up on remediation activities
Investigate complex security issues and provide technical recommendations
Support Security Incident Response and forensic activities
Technically coordinate external security testing, including penetration testing, validation of findings, and remediation follow-up
Develop and maintain technical documentation, processes, playbooks, and Product Security tools
Stay up to date with emerging security threats, technologies, and best practices
Act as a technical reference for Product Security, sharing knowledge and supporting less experienced security professionals
Collaborate with Software Development, Cloud, Product Security, and Incident Response teams

Requirements

What you’ll need

Bachelor’s degree in Engineering, Computer Science, or a related field
7+ years of experience in Security Engineering, Product Security, Application Security, Vulnerability Management, or related areas
Hands-on experience working with software development teams and Cloud platforms
Strong experience in Threat Modeling and Cybersecurity Risk Assessment
Solid experience in vulnerability analysis and remediation strategies
Practical experience with SCA, SAST, DAST, IaC, and/or Penetration Testing
Good understanding of Application Security and security throughout the Software Development Lifecycle
Experience working in Healthcare, Medical Devices, or other regulated industries
Strong knowledge of standards and regulations such as ISO 27000, FDA Guidance, MDGC, HITRUST, and GDPR
Strong analytical and problem-solving skills, with the ability to assess complex technical security issues
Excellent communication skills and ability to collaborate with international technical teams
Fluent English, both written and spoken
Willingness to travel up to 20%

Benefits

Comp & perks

Permanent contract
Learning & Development
Friend Referral Program
Flexible schedule
100% remote work from Spain or Portugal