3 days ago
Unterschleißheim, Germany or Munich, GermanySenior
Responsibilities
- Plan and oversee threat modeling, architecture and risk reviews, vulnerability assessments, and security verification.
- Evaluate product, patient-safety, privacy, operational, and regulatory risks and ensure mitigations and decisions are documented and traceable.
- Monitor emerging threats, attack methods, technologies, third-party components, and security tools and provide risk-based recommendations.
- Coordinate product security issues and incidents from intake and investigation through remediation, communication, and lessons learned.
- Provide hands-on security guidance to engineering teams, including code reviews, secure coding, security controls, fixes, and tooling.
- Drive lifecycle security improvements through training, quality gates, corrective and preventive actions, and verification of outcomes.
- Own and improve security processes, procedures, templates, work instructions, and audit-ready evidence aligned with the quality management system.
- Collaborate across product, engineering, quality, and security functions while maintaining application-security and medical-device cybersecurity expertise.
Requirements
- Bachelor's or master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security, Electrical Engineering, or a comparable discipline.
- Hands-on software development and coding experience sufficient to review code and engage with engineering teams technically.
- Experience in product or application security for regulated or safety-critical software, including secure architecture, risk and vulnerability management, testing, secure development practices, and tooling.
- Experience working in a regulated environment.
- Experience creating and improving controlled quality-management processes, procedures, and work instructions and supporting internal or external audits or assessments.
- Strong analytical and communication skills for working with technical and non-technical stakeholders.
- Structured, evidence-based, pragmatic, and proactive approach with the ability to drive improvements.
- Relevant certifications such as CISSP, CISM, or CSSLP are advantageous.
- Ability to work in English; German is the team’s working language and willingness to learn German is appreciated.
Benefits
- Base salary range of €81,216.25–€108,288.31 per year.
- Office-based teams work in person at least three days per week; onsite roles require full-time presence at company facilities.
- Meaningful work contributing to medical products that support clinicians and patient outcomes.
Categories
About Philips
Philips builds medical imaging, patient monitoring, image-guided therapy, and connected-care software and devices for hospitals and clinicians, plus select personal health products. Revenue comes from hardware, software, and services, including SaaS via its HealthSuite cloud. Founded in 1891 and headquartered in Amsterdam, Philips is a public company listed in Amsterdam and on the NYSE (PHG), serving health systems worldwide.