Product Software Security Engineer

Are you a software engineer who believes security belongs in software from the start? As a Product Security Engineer / Product Software Security Engineer, you'll help teams build secure, resilient, and maintainable products by combining software engineering, software craftsmanship, and product security expertise.

You'll work with Product Security Architects, development teams, and the Product Security Office to turn security requirements, guidance, and assessment findings into practical solutions. Across medical devices, cloud platforms, and AI applications, you'll integrate security throughout the software development lifecycle.

This role goes beyond identifying issues: you'll solve them through quality code, better design, security tooling, team coaching, and secure development practices.

Your role

• Work alongside software engineers to implement security controls and address findings from security assessments and code reviews.
• Apply software craftsmanship principles, including maintainable design, automated testing, refactoring, and code quality, while implementing secure software solutions.
• Implement security features following established software engineering practices, design principles, and secure development standards.
• Design, develop, and integrate security capabilities and reusable software components into Philips products and platforms.
• Translate assessments, threat models, and guidance into practical plans and technical solutions.
• Review code to find vulnerabilities, improve design, and raise code quality.
• Integrate security tooling into workflows and CI/CD pipelines for automated SSDLC testing.
• Partner with architects and teams to build secure, scalable architectures across embedded, cloud, connected, desktop, and AI products.
• Apply software craftsmanship practices such as design patterns, code refactoring, legacy modernization, and TDD.
• Implement monitoring, logging, and auditing to improve resilience, observability, and incident response.
• Stay current with engineering and cybersecurity trends and bring improvements to teams.

Must-have skills & experience

• You are currently living in The Netherlands.
• Bachelor’s or master’s degree in computer science, Software Engineering, IT, Cybersecurity, Electrical Engineering, Computer Engineering, or equivalent experience.
• At least 5 years of experience in software development and software product security and one or more of the following: application security, secure software development, DevSecOps, or equivalent.
• Security certifications such as CSSLP, CISSP, CISM, or GSEC are preferred.

Nice to have:

Software Engineering

• Software architecture & design patterns, SDLC
• Clean code, code refactoring, legacy code modernization, code quality, and code reviews, TDD, BDD, CI/CD, test automation, and continuous improvement
• Product software security, DevSecOps, SSDLC, vulnerability management, secure coding, threat modeling, application security, and security architecture
• Security monitoring, logging, and operational resilience

Technical Expertise

• Programming languages such as C++, C#, Java, .NET, Rust, and Python
• Embedded, application development, cloud-native, connected/IoT, and AI-enabled software

How we work together

This position requires working onsite in the office for a minimum of three days per week.

Philips is a health technology company.