Staff Cybersecurity Software & Systems Engineer (F/M/D)

Overview

In this role you will shape secure architectures across embedded systems, cloud platforms, and mobile apps, driving compliance with key standards. You collaborate with engineering, suppliers, and leadership to strengthen product security from risk analysis to DevSecOps integration. You’ll work in a customer‑focused, innovative environment that values ownership and technical excellence, delivering measurable security impact. This position offers meaningful opportunities to influence security posture at scale and across domains.

Pay / Benefits

• Competitive Salary Package
• Performance-Based Bonus Plans
• Health and Wellness Incentives
• Employee Stock Purchase Program
• Community Outreach Programs / Charity Events
• Employee Resource Group

Responsibilities

• Drive adoption of standards like ISO/IEC 27001, IEC 62443, and Cyber Resilience Act alignment
• Define secure architectures for embedded systems, mobile apps, and cloud platforms (identity, secrets, data protection, zero-trust)
• Specify embedded security controls (secure boot, roots of trust, key provisioning, secure OTA) and establish cloud security practices (IAM, encryption, workload isolation)
• Lead product risk activities (TARA) and maintain risk tracking via security case and register
• Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and set release gates; coach engineers on secure coding and threat‑driven design
• Support V&V, penetration testing, remediation, and supplier security alignment
• Own the security compliance dossier (Cybersecurity Plans, Interface Agreements, Security Cases, Audit Reports)
• Foster a customer‑focused, safety‑driven culture; translate strategy into KPIs; strengthen cross‑functional collaboration

Key requirements

• 10+ years in software/hardware engineering with at least 5 years in cybersecurity for embedded systems, IoT, or cloud platforms
• Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products
• Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates; cloud security experience
• Familiarity with DevSecOps pipelines, CI/CD security tooling, and vulnerability management
• Hands-on experience with compliance frameworks (ISO/SAE 21434, IEC 62443, ISO/IEC 27001)
• Experience with GDPR and NIST compliance
• Strong hardware security knowledge (HSM, secure element, sensor protection) and cloud-native security, zero-trust
• Experience with penetration testing, fuzzing, and reverse engineering of embedded firmware
• Active involvement in cybersecurity community (standards, open-source projects, or research)
• Strong interpersonal skills, adaptability, and ability to work in global matrix organizations

• adaptability
• continuous learning
• cross-functional collaboration
• Hardware Security Modules (HSM)
• secure element integration
• sensor-level protection

…