Product Security Engineer

Product Security Engineer (f/m/d) – Pharmacy Automation (Vienna)

As a Product Security Engineer (f/m/d) specializing in Pharmacy Automation, you will play a crucial role in safeguarding the security of innovative pharmacy automation solutions. You will be responsible for integrating security throughout the product development lifecycle, ensuring systems are robust against cyber threats and compliant with relevant regulations, ultimately protecting patient safety and data integrity.

Why join?

Youll join a collaborative, growth-focused environment where security is treated as a core product requirement. Youll work closely with software, hardware, firmware, quality and regulatory teams to build secure-by-design pharmacy automation products used in real-world healthcare settings.

Responsibilities

• Collaborate with product development teams (software, hardware, firmware) to integrate security requirements and best practices into design, development and testing.
• Conduct threat modeling, risk assessments and vulnerability analysis for new and existing products; recommend mitigations.
• Perform security code reviews, penetration testing and fuzzing to identify and address vulnerabilities in software and firmware.
• Develop and implement secure coding guidelines, security testing methodologies and security documentation for engineering teams.
• Stay up to date on security trends and threats relevant to medical devices, industrial control systems and healthcare IT.
• Execute product security risk assessments and hazard analysis; provide remediation guidance to software engineers.
• Support product security framework activities and create security documentation, including Incident & Vulnerability Management Plans and Product Security White Papers.
• Partner with regulatory affairs and quality assurance to support compliance with standards and guidance (e.g., IEC 62443, HIPAA, GDPR, FDA guidance).
• Participate in product security incident response: investigation, analysis and remediation.
• Educate and mentor teams on secure design principles and secure coding practices.
• Evaluate third-party components/libraries for vulnerabilities and recommend safe usage or alternatives.
• Contribute to continuous improvement of the product security program and processes.

Preferred requirements

• Bachelors degree in Computer Science, Electrical Engineering, Cybersecurity or related field.
• 3+ years experience in product security engineering (embedded/IoT/ICS strongly preferred).
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10) and mitigations.
• Experience with security testing tools/methods (SAST, DAST, penetration testing).
• Proficiency in at least one language (C++, C#, Python or Java).
• Familiarity with secure development lifecycle (SDL) frameworks.
• Knowledge of cryptography principles and secure communication protocols.
• Excellent analytical, problem-solving and communication skills.
• Comfortable working cross-functionally.

Location & benefits

• Modern office in Viennas Millennium Tower with excellent transport links.
• Flexible working hours and some home office flexibility.
• Stock ownership program and social benefits (e.g., free drinks, massages, childcare support).

Salary

Minimum annual gross salary: €60,000 (full-time). Additional payment offered depending on skills and experience.