Product Security AppSec Engineer (Non-Connected Devices)

A global medical device company is seeking a Product Security Engineer / Application Security Specialist to support on a contract basis, based in Limerick with 2 days per week onsite.

You'll work with R&D, Quality, software, systems, and security teams to embed secure-by-design practices across the product development lifecycle. The role will focus on application security for regulated medical device software, with key ownership across threat modelling, SBOM, software composition analysis, CVE review, secure coding, security requirements, vulnerability remediation, and product security documentation.

The work is best suited to someone with strong AppSec experience who can partner with engineering teams, review software risks, guide remediation, and help strengthen secure SDLC practices across new and existing products.

Essential Skills

Application Security / AppSec experience
Threat modelling experience
SBOM, SCA, and CVE analysis experience
Secure SDLC / SSDLC experience
Vulnerability assessment, remediation, and technical documentation experience

Desirable Skills

Experience working with regulated software, medical device software, embedded software, or non-connected products
Knowledge of OWASP, NIST, secure coding standards, QMS, FDA, MDR, SRTM, or product security documentation

This is a strong fit for AppSec specialists who want to stay close to product development, secure software delivery, threat modelling, vulnerability remediation, and regulated product security documentation.

Keywords:

Product Security, Application Security, AppSec, Secure SDLC, Secure-by-Design, Vulnerability Management, CVE, CVSS, SBOM, SCA, Software Composition Analysis, SAST, DAST, Secure Coding, OWASP, NIST, Threat Modelling, Exploitability Assessment, Remediation Tracking, Risk Acceptance, Cryptography, Authentication, Encryption, PKI, TLS, Windows, .NET, C#, SQL Server, Non-Connected Devices, Medical Device Software, IEC 62304, ISO 13485, FDA, MDR, QMS, SRTM

Please click to find out more about our Key Information Documents. Please note that the documents provided contain generic information. If we are successful in finding you an assignment, you will receive a Key Information Document which will be specific to the vendor set-up you have chosen and your placement.

To find out more about Real, please visit

Real Staffing, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC(phone number removed) England and Wales