{"id":81552,"title":"Senior Security Architect (Human)","company":"Neura Robotics","city":null,"region":"Baden-Württemberg","location":"Metzingen / Riederich, Riederich, Baden-Wurttemberg, Germany","work_model":"onsite","employment_type":"full_time","employment":["full_time"],"roles":["security","architecture"],"visa":"not_mentioned","relocation":"not_mentioned","posted_at":"2026-07-10T09:59:35.259000+00:00","tools":["Embedded Systems","Zero Trust","IAM","CI/CD","ISO 27001","AWS","Azure","Google Cloud"],"seniority":"senior","years_experience_min":7,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"required","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules","language_badge":"Not stated","language_evidence":null,"requirements_snippet":null,"url":"https://jobs.ashbyhq.com/neura-robotics-gmbh/d7b2b0a6-44a1-434f-8f7d-cb2ccc72eb5c","source":"ashby","agency":null,"description_text":"NEURA Robotics builds cognitive robots and AI systems that operate in the real world — and the security surface that comes with that is as complex as the products themselves. You will join and strengthen a growing cybersecurity team, providing technical guidance to product engineers and security specialists across our verticals while helping expand our horizontal InfoSec function into a mature, enterprise-wide capability. Working across IT and product engineering, you will refine what is already in place, raise the bar where it matters, and make security a genuine competitive advantage rather than a bottleneck.\n\nYour mission & challenges\n• Shape and evolve security architecture across IT and product — reviewing designs, identifying weaknesses, and driving hands-on improvements across embedded systems, cloud services, and enterprise IT\n• Develop and maintain reference architectures for the highest-risk areas: secure OTA update pipelines, Zero Trust network design, cloud-native security, embedded and firmware security, IAM, and secrets management\n• Lead threat modelling for high-impact initiatives across product verticals and IT infrastructure — producing prioritised risk maps, not lengthy audit reports\n• Own and maintain the organisation-wide security risk register, translating technical findings into business-relevant assessments that leadership can act on\n• Establish the security standards every team is expected to meet and drive adoption without creating friction for developers — guardrails, not gates\n• Integrate security into the development lifecycle: select and tune SAST/DAST tooling, secrets scanning, and dependency scanning across CI/CD pipelines\n• Own vulnerability management: CVE triage process, remediation SLAs, and coordination across product verticals and IT operations\n• Map NEURA's product and IT landscape against regulatory requirements — EU Cyber Resilience Act, NIS2, ISO 27001, IEC 62443 — and close gaps proactively\n• Define the security bar for third-party components, libraries, and vendor integrations entering the supply chain\n• Scope and coordinate external penetration tests; validate that findings are remediated, not just acknowledged\n• Define what good looks like for future Product Security Engineers embedded in our product verticals — shaping their hiring profiles, mandates, and onboarding\n• Serve as the technical bridge between security and engineering: review major architectural decisions, communicate trade-offs, and translate risk into terms both developers and leadership can act on\n\nWhat we can look forward to\n• 7+ years in cybersecurity, with a track record that spans both IT infrastructure security and product or application security — you are comfortable on both sides\n• Hands-on experience with threat modelling methodologies such as STRIDE or PASTA, and the ability to run sessions independently with engineering teams\n• Strong working knowledge of DevSecOps tooling: SAST, DAST, secrets scanning, software composition analysis, and CI/CD pipeline integration\n• Experience designing or assessing cloud security architecture on AWS, Azure, or GCP\n• Solid understanding of embedded and IoT security principles: secure boot, firmware integrity, OTA update security, and hardware trust anchors\n• Working knowledge of relevant frameworks and regulations: ISO 27001, IEC 62443, NIS2, and the EU Cyber Resilience Act\n• The communication range to explain a risk register to the CEO and a threat model to an embedded engineer — in the same day\n• Degree in Computer Science, IT Security, Electrical Engineering, or a comparable field — or equivalent demonstrated experience\n• CISSP, CISM, or a comparable certification is a strong plus\n• Experience in robotics, industrial automation, connected hardware, or AI system environments is particularly welcome\n• Awareness of emerging AI and ML security risks — adversarial inputs, model theft, training data integrity — is a differentiator at NEURA","responsibilities_text":null,"requirements_text":null,"status":"open","duplicate_of":null,"first_seen":"2026-11-04T00:18:17.446406+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["Embedded Systems","Zero Trust","IAM","CI/CD","ISO 27001","AWS","Azure","Google Cloud"],"posting_language":"en","evidence":[],"years_experience_max":null,"mobility_evidence":[],"model_version":"rules-8","english_badge":"English required","company_id":2275}