Product Security Specialist

In the fight against breast cancer, every medical image is an opportunity: to unlock insight, to uncover risk, to embody health, to empower life. ScreenPoint's Transpara Breast AI delivers unmatched precision for breast radiologists and helps define personalized care pathways for every woman we serve. Make your mark as part of The Breast AI Company.

We are looking for a Product Security Specialist to own product security across ScreenPoint Medical's software development lifecycle. This is an independent senior role in the Product organization with a clear mandate: keep Transpara and its platform secure, resilient, and trusted by customers, partners, regulators, and patients.

This is a hands-on product security role in which you will help shape our architecture, engineering practices and product security strategy. You will work at the intersection of AI, cloud technology and medical device software, securing a globally used product that supports the early detection of breast cancer.

As an AI-native company, we are looking for someone who is positive about the opportunities AI creates and comfortable using AI tools responsibly to improve the quality, speed, and effectiveness of their work.

Key responsibilities

• Own and evolve ScreenPoint Medical's Secure Development Lifecycle policy and ensure it is embedded in engineering workflows.
• Drive vulnerability management end-to-end: intake, triage, risk assessment, remediation tracking, and disclosure.
  
• Manage the penetration testing programme: scoping, vendor coordination, findings review, and remediation follow-up.
  
• Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, secrets detection, and container scanning.
  
• Address software supply chain risks: SBOM processes, open-source dependency management, and secure build and release practices.
  
• Lead threat modelling, secure design reviews, and security risk assessments for new and existing product features.
  
• Support secure cloud and platform architecture through practical security-by-design guidance.
• Support customer security reviews, questionnaires, and technical security discussions.
  
• Define and track product security metrics and report to leadership.
• Influence technical and architectural decisions across Product and Engineering, without formal authority.
• Use AI tools thoughtfully and securely to support research, analysis, documentation, and security workflows.

Job requirements

You are a pragmatic, independent security professional who can build structure from scratch in a fast-moving, mission-driven environment. You combine hands-on technical depth with the communication skills to translate security requirements into guidance that teams can act on. You are AI-native in how you work — using AI tools as a force multiplier to research, build, and communicate — and comfortable in a scale-up where processes are still evolving and your ownership makes a real difference.

You are genuinely interested in the product and clinical domain and want to understand what you are securing, not just run the tooling.

Furthermore, you have:

• Background in product security, application security, cloud security, DevSecOps, security architecture, or a closely related discipline.
  
• Experience with vulnerability management, including prioritisation, remediation tracking, and communicating risk to technical and non-technical stakeholders.
  
• Hands-on experience with CI/CD security tooling such as SAST, DAST, SCA, secrets scanning, or container scanning.
  
• Understanding of software supply chain risks, SBOMs, and secure build and release practices.
  
• Genuine interest in the product and clinical domain — you want to understand what you are securing, not just run the tooling.
  
• Strong cross-functional collaboration skills; able to influence without formal authority.
  
• Excellent communication skills in English.

Preferred qualifications

• Experience in medical device software, regulated software, or AI/ML-enabled products.
  
• Familiarity with IEC 62304, ISO 14971, ISO 27001/2, FDA cybersecurity guidance, EU MDR, NIS2, OWASP, or NIST SSDF.
  
• Experience supporting enterprise security reviews or coordinated vulnerability disclosure processes.
  
• Relevant certifications such as CISSP, CSSLP, OSCP, GWAPT, CCSP, or similar.

Join ScreenPoint and bring your product security expertise to a team building AI that genuinely improves breast cancer detection outcomes worldwide.

This is an opportunity to take real ownership of product security and directly influence how a globally used AI medical device is designed, built and secured.

About us

ScreenPoint Medical is a leading company that develops and markets breast image analysis and cutting edge machine learning applications and services. Our product Transpara improves breast cancer survival rates by detecting cancers earlier so that treatment can be more effective and less invasive.

Do you want to help us build an innovative solution to improve health worldwide? And do you want to be part of an ambitious and fast-growing team who help you develop your career further? Please apply using the application button.

Providing a Certificate of Conduct (VOG) or background check is part of our application procedure. Questions about the contents of the vacancy or the recruitment process at ScreenPoint Medical? Please send an email to [email protected].