Principal Product Security Engineer (Medical Devices)

Location: Kefar Sava, Israel. The listing states remote work, while the role description specifies that the position is based in Kfar Saba and follows an onsite work model.

Competitive salary and flexible benefits package; eligible for the hirify.global Incentive Plan short-term incentive.

Company

hirify.global is a global healthcare technology company, with CathWorks developing the AI-enabled FFRangio medical device platform for cardiovascular care.

What you will do

• Own cybersecurity for the CathWorks platform, including its operating system, clinical applications, hardened environment, and custom UI shell across the product lifecycle.
• Lead threat modeling, security architecture, attack analysis, and security risk assessments.
• Define security requirements and review software features, system integrations, and third-party components.
• Establish secure Windows configurations covering hardening, application control, secure boot, encryption, and access management.
• Integrate secure coding, security testing, vulnerability scanning, and CI/CD security controls into development.
• Manage SBOMs, vulnerability monitoring, cybersecurity verification, regulatory documentation, and post-market vulnerability activities.

Requirements

• Bachelor's degree and 7+ years of experience in product security, application security, or cybersecurity engineering.
• Experience with Windows security technologies including access controls, UAC, WDAC, AppLocker, BitLocker, Group Policy, and operating system hardening.
• Experience with threat modeling, security architecture reviews, and security risk assessments for software products.
• Experience with secure SDLC practices, including SAST, DAST, SCA, SBOM generation, and CI/CD security integration.
• Experience with cryptography, PKI, TLS, certificate management, and code signing.
• The role requires collaboration with Software Engineering, Quality, Regulatory Affairs, and Product teams in a clinical medical-device environment.

Nice to have

• Experience developing regulated medical devices under IEC 62304, ISO 14971, ISO 13485, IEC 81001-5-1, or AAMI TIR57.
• Experience supporting FDA cybersecurity submissions and regulatory cybersecurity documentation.
• Knowledge of DICOM, PACS, HL7, FHIR, or medical imaging environments.
• Experience with C#/.NET, C++, Win32, reverse engineering, or exploit analysis.
• Cybersecurity certifications such as CISSP, CSSLP, GIAC, GXPN, or OSCP.

Culture & Benefits

• Full-time position focused on patient safety, healthcare technology, and regulatory compliance.
• Competitive compensation and flexible benefits package.
• Short-term incentive eligibility through the hirify.global Incentive Plan.
• Applications must be submitted through official hirify.global channels; legitimate recruiting communications use approved hirify.global platforms and official @hirify.global.com addresses.