Product Security Architect

ppAt Materialise Medical, we believe that better healthcare starts with solutions designed around the individual patient. If you're passionate about bringing personalized care to every patient, you'll love being a part of this team. Through the technology we develop, researchers, engineers, and clinicians are revolutionizing personalized treatment
- helping improve and save lives daily. /p pWe are looking for a Product Security Architect to lead the design and implementation of secure architectures across our products, including Materialise Mimics Flow
- a cloud-based platform operating in a regulated medical device environment. This role ensures that security is embedded throughout the entire product lifecycle, from initial concept and design through development, deployment, and maintenance. /p h3Job description /h3 pOur platform leverages a cloud-native architecture on AWS, with an increasing adoption of containerized workloads orchestrated by Kubernetes and supported by DevOps practices. We are actively progressing the migration of legacy applications and further strengthening our operational and architectural foundations to improve scalability, reliability, and maintainability over time. The platform processes sensitive medical data and operates under strict regulatory requirements, requiring compliance with recognized cybersecurity standards and medical device regulations. You will work closely with engineering, product, and DevOps teams to proactively identify risks, define security requirements, and implement best practices that protect our systems, data, and users. You will also play a key role in supporting audits and regulatory processes, contributing to required documentation, and ensuring that security controls are clearly defined, effectively implemented, and fully traceable. /p h3What you will do /h3 h3Secure architecture design /h3 ul liDefine and review secure system architectures for applications, services, and platforms /li liDesign and guide the implementation of: Identity and access management (SSO, OIDC, SAML, authorization models) /li liTenant isolation and access control /li liData protection and privacy-by-design (encryption, key management, PII handling) /li liSecrets management and network segmentation /li liLogging, monitoring, and auditability aligned with compliance requirements /li liSecure CI/CD and software supply chain practices /li /ul h3Threat modeling and risk assessment /h3 ul liConduct threat modeling sessions and train the teams to identify potential vulnerabilities early /li liPerform risk assessments and recommend mitigation strategies /li /ul h3Security integration in development /h3 ul liEmbed security practices into SDLC (Secure SDLC) /li liGuide teams on secure coding standards and design patterns /li liSupport the adoption of SAST, DAST, SCA, and other security tools /li /ul h3Engineering collaboration /h3 ul liPartner with engineering and product teams to ensure security requirements are clear and actionable /li liParticipate in design reviews and architecture discussions /li /ul h3Compliance and standards /h3 ul liEnsure adherence to applicable standards (e.g., ISO 27001) and regulations (e.g., GDPR, data protection laws) /li liContribute to internal security policies and guidelines /li liAlign product security initiatives with the broader organizational security roadmap /li /ul h3Vulnerability management and incident support /h3 ul liSupport vulnerability remediation and coordinate with teams on fixes /li liAssist in security incident analysis and response /li /ul h3Security strategy and roadmap /h3 ul liDefine and drive a product security roadmap aligned with business goals /li liPromote a security-first culture across teams /li /ul h3Your profile /h3 ul li8+ years of experience in software engineering, system architecture, or application security, including hands-on work in cloud or distributed systems /li liExperience leading architecture reviews and driving security decisions across teams /li liExperience designing and implementing security controls (e.g., IAM, encryption, secrets management, network segmentation) in production environments /li /ul h3Technical skills /h3 ul liStrong understanding of security principles (authentication, authorization, cryptography, secure APIs) /li liConducted threat modeling using STRIDE, mapped threats to CAPEC and CWE, and applied CVSS scoring to prioritize remediation efforts /li liFamiliarity with security tools (SAST, DAST, SCA, container security, etc.) /li liKnowledge of cloud security (AWS, Azure, or GCP) /li /ul h3Standards and frameworks /h3 ul liStrong stakeholder management skills, with the ability to influence engineering, product, and leadership without direct authority /li liAnalytical thinking and problem-solving mindset /li liComfortable communicating security risks, decisions, and strategy to senior leadership /li /ul h3Will be a plus /h3 ul liSecurity certifications (e.g., CISSP, CISM, CSSLP)