Product Security Architect

ppAt Materialise Medical, we believe that better healthcare starts with solutions designed around the individual patient. If you’re passionate about bringing personalized care to every patient, you’ll love being a part of this team. Through the technology we develop, researchers, engineers, and clinicians are revolutionizing personalized treatment — helping improve and save lives daily. /ppWe are looking for a Product Security Architect to lead the design and implementation of securearchitecturesacross our products, including Materialise Mimics Flow — a cloud-based platformoperatingin a regulated medical device environment. This role ensures that security is embedded throughout the entire product lifecycle, frominitialconceptand design through development, deployment, and maintenance. /ph3Job description /h3pOur platformleveragesa cloud-native architecture on AWS, with an increasing adoption of containerized workloads orchestrated by Kubernetes and supported by DevOps practices. We are actively progressing the migration of legacy applications and further strengthening our operational and architectural foundations to improve scalability, reliability, and maintainability over time. The platform processes sensitive medical data andoperatesunder strict regulatory requirements, requiring compliance with recognized cybersecurity standards and medical device regulations. You will work closely with engineering, product, and DevOps teams to proactivelyidentifyrisks, define security requirements, and implement best practices that protect our systems, data, and users. You will also play a key role in supporting audits and regulatory processes, contributing to required documentation, and ensuring that security controls are clearly defined, effectively implemented, and fully traceable. /ph3What you will do /h3h3Secure architecture design /h3ulliDefine and review secure system architectures for applications, services, and platforms /liliDesign and guide the implementation of:ulliIdentity and access management (SSO, OIDC, SAML, authorization models) /liliTenant isolation and access control /liliData protection and privacy-by-design (encryption, key management, PII handling) /liliSecrets management and network segmentation /liliLogging, monitoring, and auditability aligned with compliance requirements /liliSecure CI/CD and software supply chain practices /li /ul /li /ulh3Threat modeling and risk assessment /h3ulliConduct threat modeling sessions and train the teams toidentifypotential vulnerabilities early /liliPerform risk assessments and recommend mitigation strategies /li /ulh3Security integration in development /h3ulliEmbed security practices into SDLC (Secure SDLC) /liliGuide teams on secure coding standards and design patterns /liliSupport the adoption of SAST, DAST, SCA, and other security tools /li /ulh3Engineering collaboration /h3ulliPartner with engineering and product teams to ensure security requirements are clear and actionable /liliParticipate in design reviews and architecture discussions /li /ulh3Compliance and standards /h3ulliEnsure adherence to applicable standards (e.g., ISO 27001) and regulations (e.g., GDPR, data protection laws) /liliContribute to internal security policies and guidelines /liliAlign product security initiatives with the broader organizational security roadmap /li /ulh3Vulnerability management and incident support /h3ulliSupport vulnerability remediation and coordinate with teams on fixes /liliAssistin security incident analysis and response /li /ulh3Security strategy and roadmap /h3ulliDefine and drive a product security roadmap aligned with business goals /liliPromote a security-first culture across teams /li /ulh3Your profile /h3ulli8+ years of experiencein software engineering, system architecture, or application security, including hands-on work in cloud or distributed systems /liliExperience leading architecture reviews and driving security decisions across teams /liliExperience designing and implementing security controls (e.g., IAM, encryption, secrets management, network segmentation) in production environments /li /ulh3Technical skills /h3ulliStrong understanding of security principles (authentication, authorization, cryptography, secure APIs) /liliConducted threat modeling using STRIDE, mapped threats to CAPEC and CWE, and applied CVSS scoring to prioritize remediation efforts /liliFamiliarity with security tools (SAST, DAST, SCA, container security, etc.) /liliKnowledge of cloud security (AWS, Azure, or GCP) /li /ulh3Standards and frameworks /h3ulliStrong stakeholder management skills, with the ability to influence engineering, product, and leadership without direct authority /liliAnalytical thinking and problem-solving mindset /liliComfortable communicating security risks, decisions, and strategy to senior leadership /li /ulh3Will be a plus /h3ulliSecurity certifications (e.g., CISSP, CISM, CSSLP) /liliExperience with medical device cybersecurity standards (e.g., IEC8100