Job
- Level
- Senior
- Job Feld
- IT, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
- Ort
- Metzingen
- Arbeitsmodell
- Onsite
Job Zusammenfassung
In dieser Position entwickelst du Sicherheitsarchitekturen, führst Bedrohungsanalysen durch und verbesserst die Sicherheitsstandards in der Produktentwicklung sowie der IT-Landschaft, um Risiken proaktiv zu managen.
Job Technologien
Deine Rolle im Team
- NEURA Robotics builds cognitive robots and AI systems that operate in the real world - and the security surface that comes with that is as complex as the products themselves.
- You will join and strengthen a growing cybersecurity team, providing technical guidance to product engineers and security specialists across our verticals while helping expand our horizontal InfoSec function into a mature, enterprise-wide capability.
- Working across IT and product engineering, you will refine what is already in place, raise the bar where it matters, and make security a genuine competitive advantage rather than a bottleneck.
- Shape and evolve security architecture across IT and product - reviewing designs, identifying weaknesses, and driving hands-on improvements across embedded systems, cloud services, and enterprise IT.
- Develop and maintain reference architectures for the highest-risk areas: secure OTA update pipelines, Zero Trust network design, cloud-native security, embedded and firmware security, IAM, and secrets management.
- Lead threat modelling for high-impact initiatives across product verticals and IT infrastructure - producing prioritised risk maps, not lengthy audit reports.
- Own and maintain the organisation-wide security risk register, translating technical findings into business-relevant assessments that leadership can act on.
- Establish the security standards every team is expected to meet and drive adoption without creating friction for developers - guardrails, not gates.
- Integrate security into the development lifecycle: select and tune SAST/DAST tooling, secrets scanning, and dependency scanning across CI/CD pipelines.
- Own vulnerability management: CVE triage process, remediation SLAs, and coordination across product verticals and IT operations.
- Map NEURA's product and IT landscape against regulatory requirements - EU Cyber Resilience Act, NIS2, ISO 27001, IEC 62443 - and close gaps proactively.
- Define the security bar for third-party components, libraries, and vendor integrations entering the supply chain.
- Scope and coordinate external penetration tests; validate that findings are remediated, not just acknowledged.
- Define what good looks like for future Product Security Engineers embedded in our product verticals - shaping their hiring profiles, mandates, and onboarding.
- Serve as the technical bridge between security and engineering: review major architectural decisions, communicate trade-offs, and translate risk into terms both developers and leadership can act on.
Unsere Erwartungen an dich
Ausbildung
- Degree in Computer Science, IT Security, Electrical Engineering, or a comparable field - or equivalent demonstrated experience.
Qualifikationen
- Strong working knowledge of DevSecOps tooling: SAST, DAST, secrets scanning, software composition analysis, and CI/CD pipeline integration.
- Solid understanding of embedded and IoT security principles: secure boot, firmware integrity, OTA update security, and hardware trust anchors.
- Working knowledge of relevant frameworks and regulations: ISO 27001, IEC 62443, NIS2, and the EU Cyber Resilience Act.
- The communication range to explain a risk register to the CEO and a threat model to an embedded engineer - in the same day.
- CISSP, CISM, or a comparable certification is a strong plus.
- Awareness of emerging AI and ML security risks - adversarial inputs, model theft, training data integrity - is a differentiator at NEURA.
Erfahrung
- 7+ years in cybersecurity, with a track record that spans both IT infrastructure security and product or application security - you are comfortable on both sides.
- Hands-on experience with threat modelling methodologies such as STRIDE or PASTA, and the ability to run sessions independently with engineering teams.
- Experience designing or assessing cloud security architecture on AWS, Azure, or GCP.
- Experience in robotics, industrial automation, connected hardware, or AI system environments is particularly welcome.
Unser Angebot
- Full-time position.
Benefits
Work-Life-Integration
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Neura Robotics GmbH
Neura Robotics GmbH, ansässig in Metzingen, ist ein innovatives Unternehmen, das sich auf kognitive Robotersysteme fokussiert. Mit Produkten wie dem Roboterarm MAiRA und dem humanoiden Roboter 4NE1 verbindet das Unternehmen KI mit mechanischen Elementen, um eine reibungslose Interaktion zwischen Mensch und Maschine zu schaffen. Über 1200 Mitarbeiter aus mehr als 45 Nationen tragen zur globalen Expansion von Neura Robotics bei.
Description
- Unternehmenstyp
- Startup
- Arbeitsmodell
- Onsite
- Branche
- Elektronik, Automatisation
Senior Security Architect
- Ort
- Metzingen
- Arbeitsmodell
- Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
- Nur Englisch
- Nur Englisch erforderlich
