Product Security & Compliance Engineer

📋 Description

• Own cybersecurity aspects of regulatory compliance for connected hardware products
• Support EU Cyber Resilience Act readiness, including vulnerability management and SBOMs
• Create and maintain architecture and data-flow diagrams for connected products
• Conduct threat modeling and translate risks into security requirements
• Perform hands-on product security validation (SAST/DAST, SBOM tooling, firmware analysis
• Collaborate with hardware, firmware, cloud, and product teams to embed security early

🎯 Requirements

• Hands-on experience in embedded/firmware, network, application, or cloud security
• Experience creating architecture/data-flow diagrams and threat modeling
• Practical security testing experience (vulnerability scanning, SAST/DAST, SBOM tooling, firmware
• Background with connected devices/IoT and secure development practices
• Ability to translate findings into documentation, risk assessments, and compliance evidence
• Knowledge of EN 18031, RED, EU Cyber Resilience Act, ISO/IEC 27001, GDPR is advantageous

🎁 Benefits

• Fully remote role with benefits aligned to country of residence
• Opportunity to work on privacy-focused, open-source, connected technology with global reach
• Collaborative, distributed environment emphasizing autonomy and ownership