About the Role
As Product Cybersecurity Engineer, you'll make sure the connected medical devices that people living with diabetes rely on every day are secure by design. You'll drive cybersecurity engineering across devices, apps and supporting systems, from first concept through to post-market surveillance, embedding security into software and hardware architectures so products stay safe, effective and compliant. As connected care grows and regulatory expectations rise across the EU and US, you'll turn an evolving threat landscape into clear requirements, work hands-on with engineers to get the controls right, and give patients, clinicians and regulators every reason to rely on what is built.
Responsibilities
•Lead product security analyses, including threat modelling, cybersecurity risk assessments and security concept reviews for devices, mobile apps and connected components.
•Translate identified threats and risks into technical cybersecurity requirements that support compliance with IEC 81001-5-1, IEC 62304 and applicable EU and FDA cybersecurity expectations.
•Partner hands-on with development teams to decide on and verify the correct implementation of security mechanisms and controls, such as secure boot, secure update and cryptographic key handling.
•Develop requirements, specifications, and software test plans and protocols where needed.
•Perform and support security verification and validation, including coordinating penetration tests, and produce the associated quality system and regulatory documentation.
•Support incident response, vulnerability handling, SBOM maintenance and post-market security monitoring in line with regulatory requirements.
•Create and maintain the cybersecurity procedures, templates and work instructions that shape how products are built securely.
•Collaborate with product owners, engineering teams, suppliers and external partners, communicating security risk clearly to technical and non-technical audiences alike.
•Stay ahead of the evolving threat landscape, security standards and regulatory guidance, bringing expert input that strengthens product robustness and compliance.
Requirements
•Bachelor's degree in engineering, IT, computer science or a related field, or equivalent professional experience.
•3+ years of experience in product cybersecurity, including cybersecurity or safety management processes.
•Strong understanding of security risk management, compliance, policies and standards.
•Strong technical writing skills, with the ability to produce clean, formal documentation.
•A proven track record of delivering on time, with the autonomy to structure your own deliverables and a high level of accuracy and attention to detail.
•A curious, proactive mindset toward learning new technologies and domain-specific regulations.
•Fluency in English.
Nice to have
•Experience with hardware and software security features across embedded devices, Android/iOS apps and cloud, and with Bluetooth Low Energy (BLE).
•Penetration testing experience and familiarity with the Radio Equipment Directive (RED) cybersecurity requirements.
•Working knowledge of software development (e.g. C, Kotlin, Swift), a Master's degree or recognised cybersecurity certification, and exposure to the medical device industry.
Working at ViCentra
Working at ViCentra means joining a team defined by:
•Courage to create: We experiment, challenge norms, and learn fast.
•Trust above all: Integrity, honesty, and openness shape our relationships.
•Customer-first mindset: Every idea is measured by the impact on those we serve.
•A drive for excellence: We hold ourselves to the highest standard because lives depend on it.
You can shape and be shaped by groundbreaking work in MedTech, with creative freedom, supportive teamwork, and room to lead initiatives, making a direct impact in people's lives.
