Product Security Specialist

In the fight against breast cancer every medical image is an opportunity: to unlock insight to uncover risk to embody health to empower life. ScreenPoints Transpara Breast AI delivers unmatched precision for breast radiologists and helps define personalized care pathways for every woman we serve. Make your mark as part of The Breast AI Company.

We are looking for a Product Security Specialist to own product security across ScreenPoint Medicals software development lifecycle. This is an independent senior role in the Product organization with a clear mandate: keep Transpara and its platform secure resilient and trusted by customers partners regulators and patients.

This is a hands-on product security role in which you will help shape our architecture engineering practices and product security strategy. You will work at the intersection of AI cloud technology and medical device software securing a globally used product that supports the early detection of breast cancer.

As an AI-native company we are looking for someone who is positive about the opportunities AI creates and comfortable using AI tools responsibly to improve the quality speed and effectiveness of their work.

Key responsibilities

• Own and evolve ScreenPoint Medicals Secure Development Lifecycle policy and ensure it is embedded in engineering workflows.
• Drive vulnerability management end-to-end: intake triage risk assessment remediation tracking and disclosure.
  
• Manage the penetration testing programme: scoping vendor coordination findings review and remediation follow-up.
  
• Embed security controls into CI/CD pipelines including SAST DAST SCA secrets detection and container scanning.
  
• Address software supply chain risks: SBOM processes open-source dependency management and secure build and release practices.
  
• Lead threat modelling secure design reviews and security risk assessments for new and existing product features.
  
• Support secure cloud and platform architecture through practical security-by-design guidance.
• Support customer security reviews questionnaires and technical security discussions.
  
• Define and track product security metrics and report to leadership.
• Influence technical and architectural decisions across Product and Engineering without formal authority.
• Use AI tools thoughtfully and securely to support research analysis documentation and security workflows.

Job requirements

You are a pragmatic independent security professional who can build structure from scratch in a fast-moving mission-driven environment. You combine hands-on technical depth with the communication skills to translate security requirements into guidance that teams can act on. You are AI-native in how you work using AI tools as a force multiplier to research build and communicate and comfortable in a scale-up where processes are still evolving and your ownership makes a real difference.

You are genuinely interested in the product and clinical domain and want to understand what you are securing not just run the tooling.

Furthermore you have:

• Background in product security application security cloud security DevSecOps security architecture or a closely related discipline.
  
• Experience with vulnerability management including prioritisation remediation tracking and communicating risk to technical and non-technical stakeholders.
  
• Hands-on experience with CI/CD security tooling such as SAST DAST SCA secrets scanning or container scanning.
  
• Understanding of software supply chain risks SBOMs and secure build and release practices.
  
• Genuine interest in the product and clinical domain you want to understand what you are securing not just run the tooling.
  
• Strong cross-functional collaboration skills; able to influence without formal authority.
  
• Excellent communication skills in English.

Preferred qualifications

• Experience in medical device software regulated software or AI/ML-enabled products.
  
• Familiarity with IEC 62304 ISO 14971 ISO 27001/2 FDA cybersecurity guidance EU MDR NIS2 OWASP or NIST SSDF.
  
• Experience supporting enterprise security reviews or coordinated vulnerability disclosure processes.
  
• Relevant certifications such as CISSP CSSLP OSCP GWAPT CCSP or similar.

Join ScreenPoint and bring your product security expertise to a team building AI that genuinely improves breast cancer detection outcomes worldwide.

This is an opportunity to take real ownership of product security and directly influence how a globally used AI medical device is designed built and secured.

About us

ScreenPoint Medical is a leading company that develops and markets breast image analysis and cutting edge machine learning applications and services. Our product Transpara improves breast cancer survival rates by detecting cancers earlier so that treatment can be more effective and less invasive.

Do you want to help us build an innovative solution to improve health worldwide And do you want to be part of an ambitious and fast-growing team who help you develop your career further Please apply using the application button.

Providing a Certificate of Conduct (VOG) or background check is part of our application procedure. Questions about the contents of the vacancy or the recruitment process at ScreenPoint Medical Please send an email to

Required Experience:

Senior IC