Security Architect / Product Security (CRA)

Location: Hybrid in Stuttgart, Germany, with at least 2 days per week on site

Salary: €84,000–€110,000 per annum

Company

hirify.global is recruiting for a global technology group working in test and measurement, secure communications, and cybersecurity.

What you will do

• Own product security architecture across hardware, firmware, software, and embedded devices.
• Build secure product development and secure-by-design practices into the engineering lifecycle.
• Lead threat modelling and threat and risk analysis (TARA).
• Drive Common Criteria evaluations and certifications with evaluation laboratories and the BSI.
• Align products with ISO/IEC 27001 and BSI IT-Grundschutz.
• Implement Cyber Resilience Act (CRA), NIS-2, and Radio Equipment Directive (RED) / EN 18031 cybersecurity requirements.

Requirements

• Senior experience in product security, security architecture, or embedded security.
• Hands-on experience with secure development processes, such as IEC 62443-4-1.
• Practical experience with Common Criteria or a similar security certification.
• Working knowledge of ISO 27001 and BSI IT-Grundschutz.
• Practical exposure to CRA, NIS-2, and RED cybersecurity compliance.
• Business-fluent German and English preferred.

Nice to have

• IEC 62443, ETSI EN 303 645, PKI, or secure boot experience.
• CISSP, CSSLP, or ISO 27001 Lead Auditor certification.
• Eligibility for German security clearance (Sicherheitsüberprüfung).

Culture & Benefits

• Fixed-term, full-time contract for 24 months.
• 40 hours per week, starting as soon as possible.
• Hybrid working pattern with regular on-site presence in Stuttgart.

Hiring process

• Apply or contact Jamaine Agyepong at hirify.global for a confidential discussion.
• Quote reference 241 when applying or contacting the recruiter.