Product Security Risk Analyst (AAMI TIR57 / IEC 62304)
- 100% Remote Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking a Product Security Risk Analysis Expert based in Spain to support a general leader in in vitro diagnostics. You'll perform Security Risk Assessments (SRAs) on R&D; medical device products throughout their lifecycle, based on AAMI TIR57:2016 and taking IEC 62304 into account for software aspects.

Responsibilities:
• Gather requirements from the client's Cybersecurity R&D; Center of Expertise.
• Scope and plan Product Security assessments.
• Prepare and lead workshops with R&D; teams.
• Perform the various categories of Security Risk Assessments requested.
• Take part in penetration test debriefings.
• Analyze the cybersecurity impact of architecture changes.
• Integrate vulnerability scanner results into the risk analysis.
• Create, update, and review SRAs.
• Present and report assessment results to stakeholders.




• Contribute to KPI tracking.
• Participate in the monthly committee with the Cybersecurity R&D; Center of Expertise. Required Skills &

Qualifications:
• Minimum 3 years of experience in product security or security risk analysis.
• Degree or Master's in engineering, computer science, or cybersecurity.
• Hands-on experience with AAMI TIR57:2016.
• Solid knowledge of IEC 62304 (medical device software lifecycle).
• Proven experience conducting Product Security Risk Assessments.
• Ability to facilitate technical workshops and communicate findings to R&D; teams.
• Strong analytical and technical writing skills.
• Fluent English; French is a strong plus.
• Experience in the medical device or healthcare industry is a plus (e.g., FDA premarket cybersecurity guidance, ISO 14971, IEC 81001-5-1). Why Join Squad?
• Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.
• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

📌 Product Security Risk Analyst (España)
🏢 SQUAD Conseil et Expertises
📍 España