Security Specialist – Embedded Product Security, TARA & CRA

Project overview

For our Cyber Security team, we are looking for an experienced Security Specialist to support product security in the development process. The focus is on embedded systems with hardware and software components, as well as associated analysis and evaluation software, management software, and cross-functional middleware.

We are seeking a technically proficient Cyber Security expert who conducts threat and risk analyses, derives concrete security requirements from them, and drives their implementation together with the development teams. In addition to conceptual work, a strong practical technical orientation is expected.

Important Technical Distinction:

This project concerns Cyber Security / Product Security. We are looking for experts in technical product security, Threat Analysis and Risk Assessments (TARA), and the security of embedded systems. Candidates with an exclusive specialization in Functional Safety (FuSa), for example, focusing on ISO 26262 or IEC 61508, do not match the required profile.

Responsibilities

• Conducting Threat Analysis and Risk Assessments (TARA) for embedded products, systems, and software
• Deriving technical security requirements and suitable measures for securing and hardening products
• Creating and maintaining product and system security concepts at the device and system level
• Evaluating and implementing relevant requirements of the Cyber Resilience Act (CRA)
• Analyzing and evaluating cyber security requirements, considering customer requirements as well as requirements from production, service, and purchasing
• Evaluating and processing security-relevant change requests
• Technical coordination with development and specialist departments, as well as regular status reports and task reviews
• Practical analysis of products, including the assessment of hardware and technical system components
• Supporting development teams in implementing suitable security measures

Requirements

Framework Conditions

Have we sparked your interest? Then we look forward to receiving your application with your current profile, availability, and hourly rate.

Please send your documents directly to *@*.de

• Completed degree in Cyber Security, Computer Science, Electrical Engineering, Aerospace Engineering, or a comparable qualification
• Relevant practical experience with the Cyber Resilience Act (CRA) and its product security requirements
• Demonstrable experience in conducting TARA and creating security concepts at the device and system level
• Experience with the analysis and derivation of cyber security requirements for embedded products
• Good technical understanding of embedded systems, their hardware, software, and system architecture
• Knowledge of relevant security standards, frameworks, and hardening standards, such as BSI IT-Grundschutz, ISO 21434, ISO/IEC 15408 (Common Criteria), MITRE EMB3D, DISA STIGs, or CIS Benchmarks
• Fluent German and English language skills
• Independent, structured, and practice-oriented way of working
• Ability not only to conceptually define security requirements but also to drive their technical implementation with the development teams
• Duration: initially 3 months, with a desired extension as part of a long-term collaboration
• Coordination: weekly coordination meeting, on-site in Munich or remote
• On-site appointments: individual appointments, e.g., for kick-off, at various locations in Germany; maximum once per quarter
• Start date: by agreement

Project details

• Start: ab sofort
• Duration: 3 Monate
• Remote: hybrid
• Location: München, Deutschland, DE
• Languages: German