Senior Embedded Security Test Engineer (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior Embedded Security Test Engineer (Cybersecurity): Securing embedded products for industrial valves and pumps with an accent on firmware security analysis and EU Cyber Resilience Act compliance. Focus on conducting TARA, executing fuzzing and static/dynamic analysis, and preparing audit-ready documentation.
Location: Remote (Europe, Latin America). Willingness to travel for occasional customer visits 3-4 times per year.
Company
is an international IT services company providing specialized engineering and security expertise to global industrial manufacturers.
What you will do
- Execute security testing of embedded firmware and software components.
- Lead and support the team in conducting Threat Analysis and Risk Assessment (TARA) for embedded products.
- Drive internal CRA self-assessment through gap analysis, evidence collection, and remediation guidance.
- Document test results, risk findings, and create audit-ready artefacts.
- Maintain effective communication with the customer and contribute to internal cybersecurity competency.
Requirements
- Minimum 4 years of experience in cybersecurity testing.
- Hands-on experience in embedded/firmware security testing, including fuzzing and static/dynamic analysis.
- Practical knowledge of TARA methodology.
- Familiarity with CRA requirements and credible self-assessment processes.
- English: Upper-Intermediate (B2) or higher proficiency.
- Must be based in Europe or Latin America.
Nice to have
- Experience with industrial embedded platforms.
- Prior involvement in regulatory or certification audits (IEC 62443, ISO 21434, EN 303 645).
- Ability to advise development teams on IEC 62443 control applicability.
Culture & Benefits
- Remote work with a flexible schedule.
- Health and legal support.
- Opportunities for continuous education and professional growth.
- Access to an active professional community.
- Sports and community activities.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →