Software Security Architect - CRA (m/f/d)

TL;DR

Software Security Architect - CRA (m/f/d) (Security Architecture): Specify, design, review, and implement end-to-end security architectures for embedded systems and software platforms with an accent on threat analysis, security risk assessments, and security-by-design across the full product lifecycle. Focus on translating cybersecurity standards and the Cyber Resilience Act (CRA) into practical engineering requirements, traceability, and compliance evidence.

Company

hirify.global builds secure connectivity and edge processing solutions for embedded applications.

What you will do

• Specify, design, review, and evolve system software security architectures and implementations.
• Perform threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.
• Define security requirements and ensure traceability from security objectives to implementation and verification.
• Integrate security-by-design and support secure development lifecycle (SDL) activities, including architecture reviews and security verification.
• Analyze vulnerabilities and defects, run root cause analysis, and define mitigations and countermeasures.
• Define and review security mechanisms (secure boot, secure update, cryptographic services, key management, device identity, root-of-trust) and support CRA-related compliance documentation and evidence generation.

Requirements

• Master’s degree, PhD, or equivalent experience in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics, or a related technical field.
• Strong background in cybersecurity and software security architecture.
• Extensive embedded software development experience using C, Rust, and/or assembly.
• Strong understanding of SoC software stacks, middleware, firmware, operating systems, and applications.
• Experience with threat modeling, security risk assessment, and secure system design.
• Excellent communication and stakeholder management skills for global, cross-functional collaboration.

Nice to have

• Experience with security architecture for automotive, industrial, or IoT products.
• Experience with product security regulations and compliance frameworks, including the Cyber Resilience Act (CRA).
• Experience with Secure Development Lifecycle (SDL) practices and security certification frameworks (e.g., PSA Certified, SESIP, Common Criteria).
• Experience in vulnerability management, penetration testing, or security assessments.
• Hardware/software security co-design and/or AI security interest.

Culture & Benefits

• Work in an industrial security team focused on protecting real devices.
• Home office and flexible working time.
• Meal benefits and additional employee benefits.
• Compensation benchmarked to the electronic and semiconductor industry; graded in Employment Group V after 6 years (per applicable Austrian CBA).

Hiring process

• Application review with consideration of individual experience and expectations.
• Interviews focused on security architecture, embedded security experience, and stakeholder communication.

Location: Gratkorn, Austria