Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 92 days ago

Product Security Architect

materialise51 open roles

Where
Leuven Materialise
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowProduct Security Architectmaterialise · Leuven Materialise

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on materialise's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. materialise postings stay open a median of 12 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 92 days ago

materialise median: 12 days open

The posting

At Materialise Medical, we believe that better healthcare starts with solutions designed around the individual patient. If you’re passionate about bringing personalized care to every patient, you’ll love being a part of this team. Through the technology we develop, researchers, engineers, and clinicians are revolutionizing personalized treatment — helping improve and save lives daily.

We are looking for a Product Security Architect to lead the design and implementation of secure architectures across our products, including Materialise Mimics Flow — a cloud-based platform operating in a regulated medical device environment. This role ensures that security is embedded throughout the entire product lifecycle, from initial concept and design through development, deployment, and maintenance.

Job description

Our platform leverages a cloud-native architecture on AWS, with an increasing adoption of containerized workloads orchestrated by Kubernetes and supported by DevOps practices. We are actively progressing the migration of legacy applications and further strengthening our operational and architectural foundations to improve scalability, reliability, and maintainability over time. The platform processes sensitive medical data and operates under strict regulatory requirements, requiring compliance with recognized cybersecurity standards and medical device regulations. You will work closely with engineering, product, and DevOps teams to proactively identify risks, define security requirements, and implement best practices that protect our systems, data, and users. You will also play a key role in supporting audits and regulatory processes, contributing to required documentation, and ensuring that security controls are clearly defined, effectively implemented, and fully traceable.

What you will do

Secure architecture design

  • Define and review secure system architectures for applications, services, and platforms
  • Design and guide the implementation of: Identity and access management (SSO, OIDC, SAML, authorization models) Tenant isolation and access control Data protection and privacy-by-design (encryption, key management, PII handling) Secrets management and network segmentation Logging, monitoring, and auditability aligned with compliance requirements Secure CI/CD and software supply chain practices

Threat modeling and risk assessment

  • Conduct threat modeling sessions and train the teams to identify potential vulnerabilities early
  • Perform risk assessments and recommend mitigation strategies

Security integration in development

  • Embed security practices into SDLC (Secure SDLC)
  • Guide teams on secure coding standards and design patterns
  • Support the adoption of SAST, DAST, SCA, and other security tools

Engineering collaboration

  • Partner with engineering and product teams to ensure security requirements are clear and actionable
  • Participate in design reviews and architecture discussions

Compliance and standards

  • Ensure adherence to applicable standards (e.g., ISO 27001) and regulations (e.g., GDPR, data protection laws)
  • Contribute to internal security policies and guidelines
  • Align product security initiatives with the broader organizational security roadmap

Vulnerability management and incident support

  • Support vulnerability remediation and coordinate with teams on fixes
  • Assist in security incident analysis and response

Security strategy and roadmap

  • Define and drive a product security roadmap aligned with business goals
  • Promote a security-first culture across teams

Your profile

  • 8+ years of experience in software engineering, system architecture, or application security, including hands-on work in cloud or distributed systems
  • Experience leading architecture reviews and driving security decisions across teams
  • Experience designing and implementing security controls (e.g., IAM, encryption, secrets management, network segmentation) in production environments

Technical skills

  • Strong understanding of security principles (authentication, authorization, cryptography, secure APIs)
  • Conducted threat modeling using STRIDE, mapped threats to CAPEC and CWE, and applied CVSS scoring to prioritize remediation efforts
  • Familiarity with security tools (SAST, DAST, SCA, container security, etc.)
  • Knowledge of cloud security (AWS, Azure, or GCP)

Standards and frameworks

  • Strong stakeholder management skills, with the ability to influence engineering, product, and leadership without direct authority
  • Analytical thinking and problem-solving mindset
  • Comfortable communicating security risks, decisions, and strategy to senior leadership

Will be a plus

  • Security certifications (e.g., CISSP, CISM, CSSLP)
  • Experience with medical device cybersecurity standards (e.g., ​​IEC81001-5-1, MDCG 2019-16​, section 524B(b)(2) of the FDA act)
  • Experience with DevSecOps practices and CI/CD integration
  • Background in regulated industries (e.g., healthcare, finance)
  • Experience with penetration testing

What’s waiting for you

Work that matters The technology we build at Materialise pushes the boundaries. You’ll find pride in building something that matters, whether you designed it, printed it, or shipped it. No matter your role, we unlock new possibilities to build a better and healthier world every day.

At Materialise, we expect you to think about the customer, not just the task. You push for better solutions and care about the difference your work makes.

A people-centered space When you join Materialise, you join a group of colleagues invested in you, not just your work. From your own team to a department across the world, you’ll find a sense of belonging with people who help without being asked, challenge you, and have your back.

At the same time, we expect you to invest in the people around you — not just your own work — to make the group stronger than the sum of its parts.

An environment of trust As a company of innovators, we know how crucial autonomy is in your work. When we hire you, we trust in your expertise, giving you space to organize your tasks, work flexibly, and make your own calls.

At Materialise, we expect you to deliver on that trust and keep your commitments.

A career ready to build When you see opportunities for your career to grow at Materialise, we encourage you to go for them. People shape a fulfilling career at their own pace here.

At Materialise, we expect you to take initiative in your own development. Don’t wait for someone else to plan your career. Step into the space and make it count.

Make a difference together with the Medical team.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against materialise's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on materialise's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    materialise's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.