Neura Robotics Gmbh
Cybersecurity Engineer - Cloud, Ops (human)
Metzingen / Riederich. Posted 6 months ago
The role
This person will secure cloud-native platforms and own the AppSec toolchain. They will drive vulnerability management, perform threat modeling, and support NIS2 compliance for robot systems.
What you will do
- Secure cloud-native platforms via least-privilege IAM, network segmentation, secrets management, and policy-as-code
- Operate SAST, DAST, SCA, and container/IaC scanning in GitLab CI/CD
- Run risk-based vulnerability management and remediation tracking
- Conduct STRIDE threat modeling across microservices, edge, and AI/ML inference pipelines
- Support NIS2 compliance through documentation, incident notification workflows, and supply-chain security assessments
- Define and enforce secure coding and API standards
- Lead secure architecture reviews for cloud-native and AI-adjacent systems
- Bridge to embedded security to maintain end-to-end integrity
Required qualifications
- Degree in Computer Science, Cybersecurity, or Software Engineering
- 3–5 years in application or cloud security with demonstrated ownership of AppSec tooling and vuln management in a product environment
- Hands-on command of OWASP Top 10/ASVS, cloud security posture, and DevSecOps tooling
- Proven vuln management lifecycle: CVSS + exploitability triage, SLA-driven closure, and audit-ready documentation
- Working knowledge of NIS2, EU CRA, ISO 27001, or IEC 62443
- Python/Bash proficiency
- Hands-on with container and Kubernetes security, IaC scanning, and AWS governance tooling
- Communicates security risk clearly to engineering and management
Nice to have
- OSCP
- AWS Security Specialty
- Exposure to AI/ML pipeline security (SageMaker, Triton, ONNX) and model supply chain risks
About the company
The Systems Engineering Department turns market demands into safe, certifiable, and competitive robot systems. They shape the next generation of human-robot systems at the intersection of security, compliance, and robotics.