Why you should join:

Your main tasks:

• Security Leadership & Compliance

  • Drive adoption of standards such as ISO/IEC 27001 and IEC 62443 and ensure alignment with the Cyber Resilience Act.

  Architecture & Design

  • Define secure architectures for embedded systems, mobile apps, and cloud platforms, including identity, secrets, data protection, and zero‑trust patterns.
  • Specify embedded security controls (secure boot, roots of trust, key provisioning, secure OTA) and establish cloud security best practices across IAM, encryption, and workload isolation.
  • Align projects with relevant industry standards (e.g., ISO/SAE 21434, IEC 62443).

  Risk Management

  • Lead product TARA activities and maintain risk tracking through the security case and register.

  Secure Development & DevSecOps

  • Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates.
  • Maintain security workflows and coach engineers on secure coding and threat‑driven design.

  Validation & Supplier Engagement

  • Support V&V, penetration testing, and remediation, and manage security alignment with suppliers.

  Compliance & Documentation

  • Own the security compliance dossier, including Cybersecurity Plans, Interface Agreements, Security Cases, and Audit Reports.

  Leadership & Culture

  • Foster a customer‑focused, safety‑driven culture; translate strategy into KPIs; and strengthen cross‑functional collaboration.

Your ideal background:

• Bachelor’s degree in Computer Science, Electrical/Electronic Engineering, Cybersecurity, or related discipline. 
• 10+ years in software/hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms.
• Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products.
• Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security on the cloud
• Familiarity with DevSecOps pipelines, CI/CD security tooling, and vulnerability management.
• Hands-on experience with compliance frameworks (ISO/SAE 21434, IEC 62443, ISO/IEC 27001)
• Implementation of cybersecurity processes and methods
• Hands on experience with GDPR and NIST.

Essential Skills:

• Proficient in hardware security technologies, including Hardware Security Modules (HSM), secure element integration, and sensor-level protection. 
• Skilled in cloud-native security practices, and zero-trust architecture. 
• Experienced in advanced testing techniques, including penetration testing, fuzzing, and reverse engineering of embedded firmware. 
• Knowledgeable in privacy engineering and compliance with regulatory frameworks like GDPR and global data protection laws. 
• Active contributor to the cybersecurity community, through involvement in industry standards, open-source security projects, or published research. 
• Strong interpersonal and professional attributes, including adaptability, a continuous learning mindset, and the ability to thrive in global, matrixed organisations.

Competencies