Security Engineer - Secure-by-Design for Embedded Systems

Your Tasks

Product Security Requirements

· Support the product development during the specification and design of security features

· Support the review of the software architecture and design to ensure a “secure by design” product development

· Participate and provide technical input to the vulnerability scanning and analysis and scoring process and generate vulnerability reports

· Support security and penetration testing of our product lines

Product Certification

· Contribute to security certification work: Helpmanaging and improving certification evidences

· Support tracking of certification maintenance and re-certification activities

Tool Development and Maintenance

· Support the specification development and maintenance of automated external (CVE) and internal (Jira) vulnerability issue monitoring tools

· Integration of SBOM generation tools into the CI/CD pipeline

· Support the selection, configuration and integration of code analysis tools

· Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software

· Strong knowledge of the ‘C’ programming language as well as Python, Shell scripting, tool interactions via REST API and various data formals like XML, Json or YAML

· Exposure to security certifications, e.g., in the avionic, industrial automation, railway or automotive is a plus

· Strong verbal and written communication skills, fluent English is a must

• An open, cooperative and particularly good working atmosphere
• A permanent employment contract in a modern, well-equipped workplace
• Exciting tasks and individual training opportunities
• Tutor and introduction week during the initial training period
• Mobile working
• Company events