Senior Product Security Engineer (Medical Device Cybersecurity)

Location: Caesarea, Haifa, Israel; hybrid work with a minimum of two days per week onsite

Company

hirify.global develops healthcare technologies focused on alleviating pain, restoring health, and extending life, serving patients across more than 150 countries.

What you will do

• Partner with engineering teams to embed cybersecurity requirements throughout the product development lifecycle, from design through post-market support.
• Conduct threat modeling, security risk assessments, and vulnerability analyses across medical devices, cloud applications, and connected ecosystems.
• Design and implement controls including secure boot, encryption, secure communications, software update mechanisms, and access controls.
• Evaluate security findings, recommend mitigations, and support remediation with development teams.
• Collaborate with software, systems, cloud, quality, regulatory, and product teams to deliver secure-by-design outcomes.
• Support product cybersecurity governance, risk, compliance, regulatory requirements, and technical guidance on emerging threats and best practices.

Requirements

• Bachelor’s degree with 7+ years, or master’s degree with 5+ years, of experience in product security, application security, cybersecurity engineering, or related cybersecurity roles.
• Experience securing cloud applications in a regulated industry environment.
• Experience conducting threat modeling, security risk assessments, and vulnerability analysis.
• Knowledge of cybersecurity frameworks and standards including NIST and OWASP.
• Experience partnering with engineering teams to identify and mitigate technical security risks.

Nice to have

• Experience with secure software development lifecycle and secure-by-design practices.
• Experience with medical device cybersecurity standards including IEC 81001-5-1, ISO 14971, and FDA cybersecurity guidance.
• Experience supporting regulatory cybersecurity submissions for medical devices or healthcare software.
• Experience with cloud-connected medical devices, digital health platforms, or connected healthcare ecosystems.
• Security certifications such as CISSP, CompTIA Security+, CSSLP, or equivalent.

Culture & Benefits

• Full-time employee position with a hybrid work arrangement.
• Competitive salary and flexible benefits package.
• Eligible for the short-term hirify.global Incentive Plan.
• Work in a healthcare technology environment focused on patient safety and product innovation.