Product Security AppSec Engineer

Salary: £? - ? per year

• We are looking for someone with application security / App Sec experience.
• We require threat modelling experience.
• We require experience with SBOM, SCA, and CVE analysis.
• We require Secure SDLC / SSDLC experience.
• We require experience in vulnerability assessment, remediation, and technical documentation.
• We would value experience working with regulated software, medical device software, embedded software, or non-connected products.
• We would value knowledge of OWASP, NIST, secure coding standards, QMS, FDA, MDR, SRTM, or product security documentation.

• We will partner with R&D, Quality, software, systems, and security teams to embed secure-by-design practices across the product development lifecycle.
• We will focus on application security for regulated medical device software.
• We will own threat modelling, SBOM, software composition analysis, CVE review, secure coding, security requirements, vulnerability remediation, and product security documentation.
• We will review software risks, guide remediation, and help strengthen secure SDLC practices across new and existing products.
• We will support secure software delivery and product security documentation.

• Embedded
• Support
• OWASP
• Security

We are a global medical device company offering a contract opportunity for a Product Security Engineer / Application Security Specialist based in Limerick, with 2 days per week onsite. This role is a strong fit for App Sec specialists who want to stay close to product development, secure software delivery, threat modelling, vulnerability remediation, and regulated product security documentation. We work closely with cross-functional engineering and quality teams to strengthen secure-by-design practices across our products.