Cybersecurity Architect (Robotics & IoT)

Location: On-site in Metzingen / Riederich, Germany

Company

hirify.global builds cognitive robots and AI systems for real-world environments.

What you will do

• Shape security architecture across IT, embedded systems, cloud services, and product engineering.
• Develop reference architectures for secure OTA updates, Zero Trust networks, cloud-native security, embedded and firmware security, IAM, and secrets management.
• Lead threat modelling for major product and infrastructure initiatives and maintain the organisation-wide security risk register.
• Establish security standards and integrate SAST, DAST, secrets scanning, dependency scanning, and other DevSecOps controls into CI/CD pipelines.
• Own vulnerability management, including CVE triage, remediation SLAs, third-party component security, and external penetration tests.
• Bridge security and engineering by reviewing architecture decisions, communicating trade-offs, and supporting the growth of the Product Security function.

Requirements

• 7+ years of cybersecurity experience spanning IT infrastructure security and product or application security.
• Hands-on experience with threat modelling methods such as STRIDE or PASTA.
• Strong knowledge of DevSecOps tooling, including SAST, DAST, secrets scanning, software composition analysis, and CI/CD integration.
• Experience designing or assessing cloud security architecture on AWS, Azure, or GCP.
• Understanding of embedded and IoT security, including secure boot, firmware integrity, OTA update security, and hardware trust anchors.
• Knowledge of ISO 27001, IEC 62443, NIS2, and the EU Cyber Resilience Act, plus a degree in Computer Science, IT Security, Electrical Engineering, or an equivalent background.

Nice to have

• CISSP, CISM, or a comparable certification.
• Experience with robotics, industrial automation, connected hardware, or AI system environments.
• Awareness of AI and ML security risks, including adversarial inputs, model theft, and training data integrity.

Culture & Benefits

• Opportunity to help develop a growing cybersecurity team and mature the enterprise-wide InfoSec function.
• Work across corporate IT and product engineering verticals.
• Security is positioned as a product advantage through practical guardrails rather than development bottlenecks.