Product Security Engineer / Threat Analyst

About the role

We are looking for a Product Security Engineer / Threat Analyst to join our Post‑Market Vulnerability Team on a hybrid basis (3 days remote, 2 days onsite) for a Limerick‑based customer. You will be at the forefront of product security for medical‑device software, driving threat research, vulnerability assessment and regulatory compliance.

Key responsibilities

• Identify, analyse and mitigate cyber threats targeting our products.
• Conduct in‑depth threat research on vulnerabilities, attack vectors and potential impacts.
• Perform product and code analysis to assess exploitability, safety risk, severity and likelihood.
• Develop and maintain artefacts for regulatory submissions, including vulnerability scans, System Security Plans (SSPs) and Risk Assessment Reports.
• Calculate residual risk by considering compensating controls, mitigations and operational environment.
• Collaborate with cross‑functional teams to ensure security standards and regulatory compliance.

Required profile

• Strong background in product security and medical‑device cybersecurity practices.
• Experience with vulnerability scoring, exploitability evaluation and risk calculation.
• Ability to document threats, impacts and regulatory evidence clearly.
• Proactive attitude toward threat detection and response.

Required skills

• Vulnerability assessment
• Threat research
• Risk assessment

What we offer

• Hybrid work arrangement (remote + onsite)
• Opportunity to work on cutting‑edge medical‑device security projects
• Collaboration with a dynamic, international team