Product Security Architect

Job Title

Product Security Architect (All Genders)

As part of our Munich-based Ultrasound Workspace engineering team, you will strengthen product security across the medical software lifecycle.

Collaborating across functions, you will manage security risks, guide secure development, coordinate issues, and continuously improve security processes by evaluating and implementing state-of-the-art methods and ways of working, while maintaining audit-ready evidence aligned with Philips standards.

You will plan and oversee product security assessments, including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification.

You will evaluate security risks and emerging threats, define proportionate mitigations, and ensure decisions and evidence remain documented and traceable.

You will coordinate security issues and incidents and drive lifecycle improvements through secure development guidance, reviews, training, quality gates, and verification of outcomes.

Working across product, engineering, quality, and security functions, you will actively evolve audit-ready processes and evidence, identify improvement opportunities, and introduce state-of-the-art methods and ways of working while strengthening application-security and medical-device cybersecurity expertise.

The team’s working language is German and English. If you don't know German – a desire to learn is appreciated.

• Plan and oversee product security assessments, including threat modeling, architecture and risk reviews, vulnerability assessments, and security verification.
• Evaluate threats and vulnerabilities for product, patient-safety, privacy, operational, and regulatory impact, and ensure mitigations, decisions, and evidence are documented and traceable.
• Monitor emerging threats, attack methods, technologies, third-party components, and security tools, and provide leadership with risk-based recommendations and improvement priorities.
• Coordinate product security issues and incidents raised by internal or external stakeholders, from intake and investigation through communication, remediation, updates, and lessons learned.
• Support and guide the engineering team on security topics, contributing hands-on to the implementation of security controls, fixes, and tooling where needed.
• Drive lifecycle security improvements through corrective and preventive actions, secure coding guidance, design and code reviews, training, security tooling, quality gates, and verification of outcomes.
• Own and continuously improve security processes, procedures, templates, work instructions, and audit-ready evidence in alignment with the quality management system. Evaluate and implement state-of-the-art methods, tools, and ways of working to keep them effective and current.
• Collaborate across product, engineering, quality and maintain current application-security and medical-device cybersecurity expertise.
• Success in this role means that product security is demonstrably embedded in the medical software lifecycle, security risks are addressed transparently and proportionately, and the organization remains prepared for audits, evolving threats, and post-market obligations.

You're the right fit if:

• A Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security, Electrical Engineering, or a comparable discipline.
• Hands-on software development and coding experience is expected, enabling you to review code and engage with engineering teams at a technical level.
• Experience in product or application security for regulated or safety-critical software, covering secure architecture, risk and vulnerability management, testing, secure development practices and tooling, with the ability to provide actionable guidance to engineering teams.
• Having worked in a regulated environment

Experience creating and improving controlled quality management system processes, procedures, and work instructions, and supporting internal and external audits or assessments by notified bodies, regulators, customers, or certification organizations.

• Strong analytical and communication skills, with the ability to support technical and non-technical stakeholders.
• A structured, evidence-based, and pragmatic working style, with a proactive mindset, and the initiative to identify needs and to actively drive improvements forward.
• Relevant security certifications, such as CISSP, CISM, CSSLP, or comparable credentials, are an advantage.

You combine strong technical expertise with a proactive and structured working style. You are comfortable coordinating stakeholders from different disciplines, making sound engineering decisions, and driving change in a complex, quality-driven environment. Most importantly, you are motivated by contributing to products that help clinicians deliver better care and improve patient outcomes worldwide.

Doing meaningful work should come with fair, transparent rewards. The base salary range for this role is € 81,216.25 – €108,288.31.

We determine pay within the range using objective factors, like the skills the role requires, your relevant experience and the responsibility you'll have in this role, alongside internal equity and local market considerations.

We believe that we are better together than apart. For our office-based teams, this means working in-person at least 3 days per week. Onsite roles require full-time presence in the company’s facilities. Field roles are most effectively done outside of the company’s main facilities, generally at the customers’ or suppliers’ locations.

Are you ready to do the work of your life to help the lives of others? Learn more about our business, discover our rich and exciting history and learn more about our purpose.

If you’re interested in this role and have many, but not all, of the experiences needed, we encourage you to apply. You may still be the right candidate for this or other opportunities at Philips. Learn more about our culture of impact with care.

#OFFICE