Lead product security and security architecture for an early-stage deep-tech startup. Define security measures for the product's build, deployment, and operation to pass customer and regulatory security reviews. The ideal candidate has 5+ years of experience in product security, platform security, or embedded security.
Key Highlights
Key Responsibilities
Technical Skills Required
Benefits & Perks
Nice to Have
Job Description
Role description
You will lead product security and security architecture for an early-stage deep-tech startup building sensor-fusion safety systems for industrial automation and robotics. You will define security measures for how the product is built, deployed, and operated, so the first product release can pass customer and regulatory security reviews under CRA, IEC 62443-4-1/4-2, and ISO/IEC 27001. You will be responsible end-to-end for turning the platform into a secure, production-ready system: designing security architecture, running threat modeling for every integration, translating findings into shipped mitigations, hardening embedded Linux, firmware, and cloud components, and establishing secure engineering practices across the technical team.
This position is in a startup environment. You should be ready for ambiguity, tight schedules, shifting priorities, rapid iteration, working directly alongside the CTO, and assuming wider responsibility for decisions that shape the final product-market fit.
Visa: Visa sponsorship is available
Equity: ESOP available, will be discussed individually
Work arrangement: on-site
Work location: Berlin
Responsibilities
- Own the security architecture for the product, from device and firmware to cloud and update infrastructure.
- Define how the product is built, signed, released, deployed, and updated securely.
- Perform TARA on every feature and integration, map attack paths and trust boundaries, assign risk, and implement required mitigations before release.
- Harden embedded Linux, firmware, cryptographic services, and cloud components against real-world attack paths.
- Coach the tech team on secure engineering practices: code review standards, secret-handling, access controls, and release discipline.
- Build and maintain the security evidence base required for customer reviews, audits, and regulatory alignment, including CRA, IEC 62443-4-1/4-2, and ISO/IEC 27001.
- Own incident-response readiness, vulnerability handling, and external penetration-testing coordination.
- Work closely with the Safety Lead so security and safety are designed in tandem.
Searching for Cyber Security roles that provide visa sponsorship? Connect with international employers through Cyber Security Jobs with Visa Sponsorship opportunities actively seeking talented professionals.
Main requirements
- 5+ years in product security, platform security, or embedded security, with hands-on software engineering experience.
- Expert in C and C++17 coding.
- Practical experience with hardening embedded Linux and firmware, including secure boot chains.
- Experience designing and implementing security architecture for connected products or cyber-physical systems.
- Practical experience with IEC 62443-4-1 / 4-2, ISO/IEC 27001, and CRA Annex I.
- Hands-on experience with cryptography and PKI in production systems.
- Cloud security expert.
- Skilled in threat modeling / TARA and converting findings into shipped mitigations.
- Fluent English.
Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.
Other requirements
- Experience working on security for end-to-end systems: device, firmware, cloud, build, release, and update paths.
- Ability to establish and defend secure engineering practices across a tech team.
- Skilled in building security evidence for customer review, audits, and regulatory scrutiny.
- Experience coordinating incident readiness and external penetration testing.
Interested in opportunities specifically in Germany? Discover our dedicated Visa Sponsorship Jobs in Germany page featuring roles from top employers in this location.
Nice to have, but not mandatory
- Published vulnerability research, CVEs
- Speaker at Black Hat, DEF CON, Pwn2Own, OffensiveCon, CCC, or Troopers.
- Experience with cyber-physical attack surfaces, anti-tamper, or reverse engineering threats.
- Experience with AI / ML system security, including model integrity and adversarial inputs.
- Experience with supply-chain security and code-signing frameworks.
Benefits
- Meal vouchers
- Potential support with relocation to Berlin
Similar Jobs
Explore other opportunities that match your interests