Product Security Specialist for Medical Devices

Salary: £52,000 - 92,000 per year

Requirements:

• We require 5+ years of relevant experience in the medical device space, either in industry or through consulting/service provider work.
• We require proficiency in security frameworks such as NIST, OWASP, MITRE ATT&CK, PASTA, and STRIDE, as well as standards including FDA cybersecurity guidance.
• We require experience assessing security risks using industry-standard methods such as penetration test results, threat modeling, and security testing, and determining residual risk after applying compensating controls.
• We require experience implementing and demonstrating compliance with security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, and SOC 2 Type 2, and familiarity with Quality Management Systems.
• We require experience working with teams in a structured software development lifecycle.
• We require excellent interpersonal skills, both written and verbal, with the ability to clearly convey complex security topics to technical and non-technical audiences.
• We require a proven track record of achieving outcomes and nurturing relationships.
• We require skill in crafting compelling proposals and other business development materials, and in cultivating opportunities within our client base and network.
• We require cyber security accreditations or qualifications such as CISSP, CSSLP, or CISM.
• We require strong problem-solving and analytical thinking skills.
• We require the ability to collaborate with multiple stakeholders in a fast-paced environment.
• We require eligibility for UK security clearance for certain roles, including at least 5 years of continuous UK residency where applicable.

Responsibilities:

• We work to agile best practices and collaborate cross-functionally with multiple teams and stakeholders.
• We use our technical skills to solve problems with clients and support internal projects.
• We work with client product teams and functional groups to define objectives, scope, and timelines for key product security initiatives and delivery approaches.
• We assess security risks across client product portfolios and recommend remediation strategies while balancing business and technical requirements.
• We advise on coding, threat modeling, and security testing strategies for embedded systems and IoT devices, while ensuring compliance with industry regulations.
• We work alongside client R&D teams to lead secure code reviews, threat modeling, security risk assessments, vulnerability assessments, and validation and verification of controls.
• We monitor emerging cybersecurity threats in the IoT and medical device landscape and write thought leadership content representing our point of view.
• We build strong stakeholder relationships across our clients.
• We foster team growth, training, and delivery outcomes.
• We support and drive business development efforts.
• We manage projects with expertise.
• We solve problems with a consulting approach.

Technologies:

• Embedded
• IoT
• Support
• Network
• OWASP
• Security

More:

We are PA Consulting, a global team of more than 4,000 strategists, innovators, designers, consultants, digital experts, scientists, engineers, and technologists. We bring ingenuity to life by combining strategic thinking, customer-centric service design, and agile engineering to help our clients turn complexity into opportunity. Our Digital & Data community works with product, design, and cross-disciplinary experts to build innovative software solutions across a broad variety of projects and tech stacks for clients in seven sectors. We offer a flexible, trust-based, inclusive environment with hybrid working, typically in the office or on client site at least two days per week, and sometimes up to five days depending on the assignment. We support growth through learning budgets, certifications, mentoring, and the option to follow a technical career track. We also offer private healthcare for you and your family, 25 days of annual leave plus a bonus half day on Christmas Eve, a generous pension, annual performance bonus, share ownership, community and charity initiatives, and tax-efficient benefits. We operate globally from offices across the UK, Ireland, US, Nordics, and the Netherlands, and we are committed to inclusion, equality, and supporting the physical, emotional, social, and financial well-being of our people.

last updated 34 week of 2026