Overview
The Product Security Architect will be instrumental in helping software and firmware teams to implement the requirements of the EU Cyber Resilience Act into their engineering processes. Working closely with development teams, this role involves translating regulatory obligations into actionable security measures while embedding best practices throughout the development lifecycle. The architect will provide guidance on secure design principles, threat modelling, and risk assessments to ensure compliance and robust security standards are integrated into product development.
Responsibilities
- Translate regulatory obligations into actionable technical guidance and engineering patterns.
- Embed secure-by-design principles, threat modelling, and security risk assessments into the development lifecycle.
- Review product architectures and trust boundaries to identify appropriate security controls and verification methods.
- Assist teams in producing clear and auditable evidence of compliance with security requirements.
Requirements
- Strong practical experience in software, application, or product security within development environments.
- Proven ability to convert regulatory or security requirements into clear engineering controls.
- Solid understanding of secure SDLC, secure coding practices, threat modelling, security testing, and third-party dependency risks.
- Ability to effectively communicate and influence engineers, architects, and technical leads without becoming a barrier to progress.