Software Security Architect - AI (m/f/d)

Description

You will join one of the largest industrial security teams and build technology that protects real devices worldwide.

The Competence Center Crypto & Security designs, builds and delivers end-to-end security, from innovation and architecture through to products in the field.

The Security Architecture Team sits within the CTO organization and helps Business Units build secure products for the Automotive, Industrial, IoT, Mobile and Edge Processing markets.

The role suits security engineers who want their work to shape real-world security solutions.

Responsibilities

• Help product teams gather requirements and specify, design, review, verify and implement security solutions for the company's products.
• Keep security built into products across their full lifecycle by working with product teams, security experts and stakeholders on robust architectures, risk assessments and standards compliance, including the Cyber Resilience Act (CRA).
• Specify, design, review and evolve system software security architectures and their implementations.
• Run threat analysis, attack surface analysis and security risk assessments for embedded systems and software platforms.
• Define security requirements and trace them from security objectives through to implementation and verification.
• Apply security-by-design principles across the whole product lifecycle.
• Support secure development lifecycle (SDL) work, including architecture reviews, security assessments and security verification.
• Analyse vulnerabilities and defects, carry out root cause analysis, and define mitigations and countermeasures.
• Define and review mechanisms such as secure boot, secure update, cryptographic services, key management, device identity and root of trust.
• Turn cybersecurity standards, regulations and best practices into practical engineering requirements and architectures.
• Produce security documentation, generate compliance evidence and manage risk for product security regulations and standards, including the CRA.
• Promote security best practices across project teams and product lines.
• Act as the technical contact for customers, evaluation labs, compliance experts and product development teams.
• Help improve the company's product security methodologies, frameworks and processes.

Requirements

• Master's degree, PhD, or equivalent experience in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics or a related technical field.
• Strong background in cybersecurity and software security architecture.
• Extensive embedded software experience in C, Rust and/or assembly language.
• Experience in AI security is a must.
• Good understanding of SoC software stacks, middleware, firmware, operating systems and applications.
• Experience with threat modelling, security risk assessment and secure system design.
• Familiarity with secure boot, cryptography and key management, device identity and root of trust, firmware protection, and secure update mechanisms.
• Familiarity with cybersecurity regulations, standards and certification schemes for embedded and connected products.
• Strong analytical skills for complex system-level security challenges.
• Independent working style, willing to listen, learn and adapt.
• Excellent communication and stakeholder management skills.
• Strong team player who works effectively in global, cross-functional environments.
• Highly desirable (optional): experience in one or more of the following areas:
• Security architecture for automotive, industrial or IoT products.
• Product security regulations and compliance frameworks, including the Cyber Resilience Act (CRA).
• Secure Development Lifecycle (SDL) practices.
• Security certification frameworks such as PSA Certified, SESIP or Common Criteria.
• Vulnerability management, penetration testing or security assessments.
• Hardware/software security co-design.
• Artificial intelligence and AI security.

Conditions

The successful candidate may or will be responsible for security-related tasks.

Assignments may or will fall within the scope of security certifications, so a careful and reliable way of working is necessary.

Full-time position in Gratkorn, Austria, graded in Employment Group V after 6 years under the Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung.

Under the Austrian Equal Treatment Act, the employment group of the applicable collective bargaining agreement must be stated.

Your individual experience and expectations will be considered during the application process.

Benefits

• Market competitive compensation, benchmarked against the electronics and semiconductor industry.
• Home office options.
• Flexible working time.
• Meal benefits and further benefits.