Further details apart from the job description as well as information about the company are available during the application process.

• You specify high-level product security requirements and break them down into sub-requirements and tasks

• You identify and analyze threats and vulnerabilities, including those in supplier products and software libraries

• You design the security strategy architecturally, coordinate its implementation, and conduct reviews of the various products

• You will act as an interface to stakeholders inside and outside of development and be available as a contact person for product (cyber) security

• You will organize product certifications with third parties and internal audits

• You will define, implement, and maintain certification-relevant development processes, including SDLC, requirements engineering, test management, verification & validation, ISMS, and PSIRT

• You will assist with security testing, including SAST, DAST, and penetration testing

• You have several years of experience in product security, ideally with regard to embedded and IoT environments

• You have a deep understanding of security mechanisms and the validation of security measures, including SBOM, CVE analysis, SAST, DAST, penetration testing, threat modeling, and vulnerability/incident management

• You have a degree in computer science, IT security, or an equivalent technical background

• You have very good English skills; German skills are an advantage

• You have basic experience in software development, AGILE, CI/CD, and the software development lifecycle

• You have in-depth knowledge of common standards in OT security, including IEC 62443, EN 18031, and ISO/TR 22100-4

• You will have the option to work from home (3 days/week).

• Flexible working hours

• You will receive 30 days of vacation

• EGYM Wellpass

• Childcare days

• JobRad

• Company pension plan

• Workation