Product Security Engineer

Quick Facts

• Role: Product Security Engineer
• Focus: Cybersecurity analyses for products and secure product development

Description

In this role, you conduct and/or commission comprehensive cybersecurity analyses for products, including penetration tests. You will develop software tools and partial automations for vulnerability scanning and robustness tests such as fuzzing network protocols. You also support product areas with cybersecurity guidance, assess components for suitability, and evaluate the effectiveness and completeness of vulnerability remediation.

Responsibilities

• Perform or commission comprehensive cybersecurity analyses (e.g., penetration testing)
• Develop software tools and (partial) automations for vulnerability scanning and robustness testing
• Fuzz network protocols to run robustness tests
• Analyze product components for cybersecurity suitability
• Assess the effectiveness and completeness of vulnerability fixes
• Advise and support product teams on cybersafe product development
• Moderate and/or evaluate threat analyses for products and systems
• Support the evaluation and remediation of cybersecurity vulnerabilities in software components
• Propose improvements to products to strengthen cybersecurity

Requirements

• Completed degree in Computer Science, Cybersecurity, Electrical Engineering, or comparable qualification
• Solid knowledge of software architectures
• Experience with network protocols (e.g., Ethernet, TCP/IP)
• Experience with penetration tests and vulnerability scanning; fuzzing/robustness testing is desirable
• Secure product development process models are desirable
• Basic cybersecurity knowledge is beneficial
• Knowledge of automation technology and/or embedded devices is advantageous
• Optional: experience moderating team analyses
• Strong teamwork and communication skills
• Independent, structured, and reliable working style
• German proficiency at least B2 and English proficiency at least B2 (spoken and written)

Benefits

• Attractive compensation
• 30 days of vacation
• Contributions to company pension plans
• Flexible working time models
• Opportunity to work mobile after the probation period