Staff Cybersecurity Software & Systems Engineer (F/M/D)

Why you should join:

Your main tasks:

• 
  
  
  

  Security Leadership & Compliance

  
  

  
  
  • Drive adoption of standards such as ISO/IEC 27001 and IEC 62443 and ensure alignment with the Cyber Resilience Act.
  
  

  
  

  Architecture & Design

  
  

  
  
  • Define secure architectures for embedded systems, mobile apps, and cloud platforms, including identity, secrets, data protection, and zero‑trust patterns.
  
  
  • Specify embedded security controls (secure boot, roots of trust, key provisioning, secure OTA) and establish cloud security best practices across IAM, encryption, and workload isolation.
  
  
  • Align projects with relevant industry standards (e.g., ISO/SAE 21434, IEC 62443).
  
  

  
  

  Risk Management

  
  

  
  
  • Lead product TARA activities and maintain risk tracking through the security case and register.
  
  

  
  

  Secure Development & DevSecOps

  
  

  
  
  • Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates.
  
  
  • Maintain security workflows and coach engineers on secure coding and threat‑driven design.
  
  

  
  

  Validation & Supplier Engagement

  
  

  
  
  • Support V&V, penetration testing, and remediation, and manage security alignment with suppliers.
  
  

  
  

  Compliance & Documentation

  
  

  
  
  • Own the security compliance dossier, including Cybersecurity Plans, Interface Agreements, Security Cases, and Audit Reports.
  
  

  
  

  Leadership & Culture

  
  

  
  
  • Foster a customer‑focused, safety‑driven culture; translate strategy into KPIs; and strengthen cross‑functional collaboration.
  
  

  
  
  
  

Your ideal background:

• Bachelor’s degree in Computer Science, Electrical/Electronic Engineering, Cybersecurity, or related discipline. 


• 10+ years in software/hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms.


• Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products.


• Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security on the cloud


• Familiarity with DevSecOps pipelines, CI/CD security tooling, and vulnerability management.


• Hands-on experience with compliance frameworks (ISO/SAE 21434, IEC 62443, ISO/IEC 27001)


• Implementation of cybersecurity processes and methods


• Hands on experience with GDPR and NIST.

Essential Skills:

• Proficient in hardware security technologies, including Hardware Security Modules (HSM), secure element integration, and sensor-level protection. 


• Skilled in cloud-native security practices, and zero-trust architecture. 


• Experienced in advanced testing techniques, including penetration testing, fuzzing, and reverse engineering of embedded firmware. 


• Knowledgeable in privacy engineering and compliance with regulatory frameworks like GDPR and global data protection laws. 


• Active contributor to the cybersecurity community, through involvement in industry standards, open-source security projects, or published research. 


• Strong interpersonal and professional attributes, including adaptability, a continuous learning mindset, and the ability to thrive in global, matrixed organisations.

Competencies