Security Architect – Product Security (m/w/d) | Stuttgart, Hybrid | €84,000 – €110,000 | 24 Months
Xcede is recruiting a Senior Security Architect for a global technology group working in test and measurement, secure communications and cybersecurity. You’ll join the product security team in Stuttgart and own security architecture for embedded, hardware and software products, from secure design through to Common Criteria certification and Cyber Resilience Act (CRA) compliance.
Key Facts
- Location: Stuttgart, Germany, hybrid with at least 2 days a week on site
- Contract: 24-month fixed-term employment, 40 hours a week
- Start: ASAP
- Salary: €84,000 – €110,000 gross a year
Responsibilities
- Design and own product security architecture for embedded devices, firmware, hardware and software
- Embed secure product development (SDL) and security by design across engineering teams
- Lead threat modelling, threat and risk analysis (TARA) and security risk assessments
- Drive Common Criteria evaluations, including Security Targets and coordination with evaluation labs and the BSI
- Keep products aligned with ISO/IEC 27001 and BSI IT-Grundschutz
- Put CRA, NIS-2 and Radio Equipment Directive (RED) / EN 18031 cybersecurity requirements into practice
- Review system and product architectures and define the right security measures for each
Requirements
- Senior experience as a Security Architect, Product Security Architect or Embedded Security Engineer
- Hands-on experience of secure development processes, for example IEC 62443-4-1
- Practical experience of Common Criteria or comparable security certification
- Working knowledge of ISO 27001 and IT-Grundschutz
- Practical exposure to CRA, NIS-2 and RED regulatory compliance
- Business-fluent German and English preferred
- IEC 62443, ETSI EN 303 645, PKI, secure boot, cryptography or HSMs
- Certifications such as CISSP, CSSLP, CISM, ISO 27001 Lead Auditor or IT-Grundschutz Practitioner
- Background in defence, telecoms, industrial or test and measurement products
Why Apply
This is a long-term senior role in product security and cyber security compliance, one of the most in-demand areas in the DACH market. You’ll get stability, a strong salary and direct involvement in CRA readiness on security-critical products.
#J-18808-Ljbffr