cybersecurity engineer (m/w/d)

• Design the end-to-end security architecture of coera's platform: supply chain, build pipeline, deployed runtime, update channel.
• Deliver CRA (Regulation (EU) 2024/2847) Annex I conformance and the IEC 62443-4-1 and -4-2 evidence base for the first customer deployment.
• Run threat modelling (TARA) on every integration and turn findings into shipped mitigations.
• Own incident-response readiness, penetration-testing relationships, and the security artefacts that pass customer review.
• Work closely with the safety engineer to keep safety and security as one property.
• Set the bar for secure engineering practice across the team.

Must have

• At least five years in product or platform security, with hands-on software engineering fluency. Production code in C and C++. 
• Hardening embedded Linux and firmware, including secure boot chains.
• IEC 62443-4-1 and -4-2 and ISO/IEC 27001, with working literacy in CRA Annex I and TARA methodology.
• Cloud security fluency.
• Cryptographic primitives and PKI operated in production.

Strong signals

• Prior work on a safety-certified or functionally safe product. The single most valuable signal for coera because it means you already treat security and safety as one property.
• Published vulnerability research, CVEs, or speaking record at Black Hat, DEF CON, Pwn2Own, OffensiveCon, CCC, or Troopers.
• Cyber-physical attack surfaces and hardware-level threats: anti-tamper, reverse engineering.
• CRA, NIS2, or Machinery Regulation 2023/1230 fluency demonstrated in shipped product.
• AI and ML system security literacy: model weight protection, model supply chain, adversarial inputs.

Bonus

• Supply-chain and code-signing frameworks.
• German or Farsi in addition to English.