About the position
Dentsply Sirona is the world's largest manufacturer of professional dental products and technologies, with a 130-year history of innovation and service to the dental industry and patients worldwide. Dentsply Sirona develops, manufactures, and markets a comprehensive solutions offering including dental and oral health products as well as other consumable medical devices under a strong portfolio of world class brands. Dentsply Sirona's products provide innovative, high-quality and effective solutions to advance patient care and deliver better and safer dentistry. Dentsply Sirona's global headquarters is located in Charlotte, North Carolina, USA. The company's shares are listed in the United States on NASDAQ under the symbol XRAY. We are looking for an experienced Senior Product Security Architect (m/f/d) to join our team. This individual will help build and enhance our Product & Solution Security (PSS) program. As a Senior Product Security Architect for our medical devices, cloud-based software, and connected solutions, you will be responsible for integrating security into the product lifecycle, ensuring regulatory compliance, and driving a security-first culture. This is a senior technical role reporting to the Head of Product and Solution Security, working cross-functionally with R&D, Quality Assurance and Regulatory Affairs, Legal, Sales, and IT to embed security-by-design into all products and solutions in our portfolio. This is a hybrid position requiring working from either our Bensheim or Zurich office.
Responsibilities
- Define and maintain secure design patterns, standards, and reference architectures to be used across all products and solutions.
- Lead threat modeling and security risk assessments across various products and solutions.
- Design technical and/or administrative security countermeasures to manage risk across products and solutions.
- Collaborate with product management and development teams to embed security into system and software designs.
- Lead technical design reviews to validate secure architecture.
- Serve as a trusted advisor across R&D on secure architecture principles.
- Actively participate in architecture governance boards and cross-functional security initiatives.
- Ensure product security compliance with FDA, ISO 13485, IEC 62304, HIPAA, GDPR, and IEC 81001-5-1.
- Support regulatory pre-market and post-market cybersecurity compliance (e.g., 510(k) submissions) for medical devices.
- Define and monitor KPIs and KRIs to track security posture improvements across the product portfolio.
- Mentor junior to mid-level architects and product security engineers on secure design principles and practices.
Requirements
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
- 8+ years of experience in cybersecurity, product security, software and hardware security, and cloud security. Experience in the medical device or healthcare industry is a strong plus.
- Industry-recognized certifications such as CISSP, CISM, CSSLP, CCSP, etc., are a strong plus.
Nice-to-haves
- Proven experience influencing product roadmaps and collaborating with engineering teams.
- Strong project management skills, ensuring security initiatives are tracked, measured, and continuously improved across products and solutions.
- Ability to balance business needs and security requirements, driving practical, risk-based security improvements.
- Deep knowledge of Secure SDLC (SSDLC) and Secure Product Development Frameworks (SPDF).
- Strong understanding of software security, IoT security, secure firmware development, and hardware security.
- Experience with cloud security platforms (AWS, Azure, GCP, Alibaba).
- Strong grasp of cryptography, API security, and data protection.
- Experience with threat modeling methodologies (STRIDE, DREAD, PASTA).
- Excellent English language skills; German language skills are a plus.
