Product Security Engineer Lead
Summary
Product Security Engineer Lead responsible for building, leading, and scaling a high-performing product security team within the RCI division. The role defines product cybersecurity strategy and embeds security-by-design across the full product lifecycle to meet regulatory and business objectives.
Responsibilities
1. Lead, mentor, and manage a team of product cybersecurity engineers
2. Build a collaborative, inclusive, and high-performance team culture
3. Define and execute a multi-year product security roadmap aligned with enterprise cybersecurity strategy
4. Prioritise resources to balance business needs, risk exposure, and regulatory obligations
5. Develop technical and cybersecurity capability through coaching and structured development
6. Define and monitor metrics for security maturity, vulnerability trends, and team performance
7. Provide technical leadership on secure product architecture and vulnerability management
8. Embed security-by-design principles across development and post-market activities
9. Partner with R&D, Quality, Regulatory, Legal, and Executive leadership to communicate security posture
10. Lead post-market cybersecurity activities including vulnerability assessment, patching, and mitigations
11. Ensure compliance with FDA, EU MDR, ISO/IEC, IEC, and global cybersecurity expectations
12. Act as a key stakeholder in design reviews, risk assessments, and incident response planning
13. Collaborate with product management and customer support on transparent security communications
14. Evaluate emerging threats and technologies to proactively strengthen product security
15. Ensure alignment with BD development policies and software quality procedures
Requirements
16. Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or related discipline
17. 8+ years' experience in product cybersecurity within regulated or medical device environments
18. Proven experience leading technical teams and defining long-term security strategy
19. Strong knowledge of secure development practices, threat modelling, and risk management
20. Experience working within regulated quality and regulatory frameworks
21. Excellent stakeholder engagement and communication skills
22. Certifications such as CISSP, CISM, or CEH are advantageous
23. Experience with embedded systems, IoT, and cloud-connected products
24. Familiarity with DevSecOps tools and methodologies
Benefits
25. Comprehensive healthcare coverage, including options for family members
26. Competitive pension scheme with employer contribution
27. Performance-related incentive bonus
28. Opportunity to participate in a company share investment or savings programme
29. Life assurance cover
30. Generous annual leave entitlement plus public holidays
#LI-MS2