Cybersecurity Engineer - Embedded, Robotics (Human)

Riederich

JD Cybersecurity Engineer Embedded – Shape the future of secure, intelligent robotic systems

At the heart of product innovation and development, our Systems Engineering department transforms market requirements into safe, certifiable, and competitive solutions and architectures. By working closely with software, hardware, safety, and certification teams, we ensure that every product meets the highest standards while adapting to rapidly evolving market needs. Our mission is to enable seamless human-robot collaboration and deliver solutions that are safe, compliant, and future-proof. Join us to shape the next generation of human-robot systems by taking ownership of system-level requirements, integration, and coordination—with architectural responsibility when needed. If you thrive in cross-functional teamwork and technical excellence, you will find exceptional opportunities with us.

• Securing the product: Responsibility for cybersecurity engineering for embedded robot platforms, from secure architecture design and threat modeling (TARA, STRIDE) to the implementation of security controls (Secure Boot, TPM/HSM-based hardware-supported identities, secure key storage, signed firmware updates) to verification and penetration testing.

• Driving compliance by design: Establishing and implementing a secure development lifecycle aligned with the requirements of IEC 62443-4-1 and the EU Cyber ​​Resilience Act. Ensuring component-level compliance according to IEC 62443-4-2, including SBOM management (e.g., CycloneDX SBOM), vulnerability treatment, and security update processes.

• Securing robotics: Hardening of RTOS environments (e.g. FreeRTOS, Zephyr, ROS 2/SROS2 etc.) and securing industrial protocols — EtherCAT, PROFINET, OPC UA, ROS 2 DDS etc. — covering authentication, integrity and availability.

• Anchoring in engineering: Practical collaboration with robotics hardware, software, and systems engineering teams to derive, map, and validate cybersecurity requirements for embedded controllers, sensor interfaces, communication stacks, and edge compute nodes; also contributing to our security software stack for device certificates, secure communication, and the OTA update process.

• Bridge to Cloud Security: Defining and enforcing the cybersecurity boundary between embedded/edge systems and cloud-based services. Aligning threat models, trust boundaries, and security controls with the cloud cybersecurity team to ensure end-to-end integrity across the entire system architecture.

• Shaping the security posture: Monitoring the evolving regulatory landscape (EU Machinery Directive, Cyber ​​Resilience Act, UNECE R155, ISO/SAE 21434) and translating new requirements into actionable engineering guidelines. Promoting vulnerability disclosure, incident response readiness, and cross-project lessons learned.

• Education: Master's degree (MSc) in Computer Science, Electrical Engineering, Embedded Systems, IT Security, or a related field. ISA/IEC 62443 certification, OSCP, or equivalent is strongly preferred.

• Track record: More than 3 years of experience in product/embedded cybersecurity engineering with demonstrable involvement in at least one product launch up to certification or market readiness. Proven ability to operate at the interface between security engineering and embedded systems development.

• Mastery of standards: In-depth expertise in IEC 62443 (especially sections 4-1 and 4-2). Practical familiarity with ISO/SAE 21434, UNECE R155, the EU Cyber ​​Resilience Act, and the NIST CSF. Understanding of how embedded cybersecurity interacts with functional safety (IEC 61508, ISO 13849).

• Technical depth: Practical experience with Secure Boot chains, hardware security modules (HSM/TPM), cryptographic protocols (TLS, X.509), embedded Linux (Yocto) or RTOS environments, and firmware security. Solid knowledge of threat modeling, penetration testing, and SBOM-based vulnerability management.

• Collaboration & Communication: Ability to work effectively within robotics engineering teams while simultaneously serving as an effective interface to cloud/IT security, certification, and external auditors. Strong ability to translate cybersecurity requirements into actionable technical specifications.