With the increasing connectivity of our devices, cybersecurity and regulatory requirements are becoming ever more important. Therefore, we are looking for a Cyber Security Engineer (m/f/d) to support our development departments in the secure design of our products and to be responsible for implementing current security requirements.
Your job description:
- Further development of cybersecurity structures for our products and development processes
- Specifying security requirements at the system and software level
- Supporting embedded software and system development in the implementation of secure software and system architectures
- Conducting threat modeling, risk analyses, and security reviews for new and existing products
- Support in ensuring compliance with regulatory requirements, in particular the EU Cyber Resilience Act
- Support in implementing relevant security standards such as ISO 27001 and IEC 62443, as well as maintaining related processes, especially the Secure Development Lifecycle (SDL).
- Assessment and monitoring of vulnerabilities in deployed software components and open-source libraries
- Creation and maintenance of security-relevant documentation, e.g. risk analyses, security concepts or SBOMs.
- Conducting security tests, e.g., code reviews, vulnerability analyses, or penetration tests.
- Collaboration with development, quality management and external partners
- Training of development teams in the areas of secure coding and product safety
Your profile:
- Completed studies in computer science, IT security, electrical engineering or comparable qualification
- Relevant professional experience in the field of cybersecurity, ideally in the area of embedded systems, IoT or industrial devices.
- Familiarity with relevant standards and regulatory requirements, such as ISO 27001, IEC 62443 and the Cyber Resilience Act (CRA)
- Understanding of topics such as cryptography, secure communication, firmware updates, and secure boot
- Experience with tools such as Git, Docker and CI/CD pipelines
- Structured and analytical work style, as well as enjoyment of collaborating with different departments and teams.
- Excellent German and English skills, both spoken and written.
Our range:
- Salary based on collective bargaining agreement; depending on knowledge/experience including special payments (ERA classification is carried out according to the guidelines of the valid framework agreement on remuneration)
- Benefits such as company bike scheme, professional development, and retirement savings.
- Hybrid working model