Senior Security Architect (Mensch)

The role

You will develop and advance security architecture across IT and product domains. You will guide engineers in product verticals and help develop the horizontal InfoSec function into a company-wide unit.

What you will do

• Develop and advance security architecture across IT and product
• Develop and maintain reference architectures for OTA-Update-Pipelines, Zero-Trust, Cloud-native Security, Embedded/Firmware-Security, IAM and Secrets Management
• Lead Threat-Modelling-Sessions for product verticals and IT infrastructure
• Build and maintain the company-wide security risk register
• Set and implement security standards for all teams
• Integrate security into the development cycle using SAST/DAST, Secrets Scanning and Dependency Scanning in CI/CD-Pipelines
• Manage vulnerabilities including CVE-Triage, Remediation-SLAs and coordination
• Map product and IT landscape against regulatory requirements like EU Cyber Resilience Act, NIS2, ISO 27001 and IEC 62443
• Define security minimum standards for third-party components and supply chain
• Coordinate external penetration tests and ensure findings are remediated

Required qualifications

• 7+ years experience in Cybersecurity with practice in IT-Infrastructure-Security and Product or Application security
• Practical experience with Threat-Modelling methods like STRIDE or PASTA
• Knowledge of DevSecOps-Tooling: SAST, DAST, Secrets Scanning, Software Composition Analysis and CI/CD-Pipeline-Integration
• Experience in designing or evaluating Cloud-Security-Architectures on AWS, Azure or GCP
• Understanding of Embedded- and IoT-Security-Principles: Secure Boot, Firmware-Integrität, OTA-Update-Security and Hardware-Trust-Anker
• Knowledge of relevant standards and regulations: ISO 27001, IEC 62443, NIS2 and EU Cyber Resilience Act
• Ability to communicate with both management and embedded engineers
• Degree in Computer Science, IT Security, Electrical Engineering or comparable field, or equivalent proven professional experience

Nice to have

• CISSP, CISM or comparable certification
• Experience in robotics, industrial automation, networked hardware or AI system environments
• Knowledge of current AI and ML-Security-Risks such as Adversarial Inputs, Model Theft and Training Data Integrity

About the company

NEURA Robotics develops cognitive robots and AI systems that act in the real world.