Embedded Security Specialist: CRA & Threat Analysis

duagon AG; Schweiz; Remote; CHF 100.000 - 130.000; Vollzeit

Zusammenfassung

duagon AG in Switzerland seeks a cybersecurity professional to bolster CRA compliance for embedded products across the full lifecycle. You will lead threat modeling, assess vulnerabilities, and ensure conformity with CRA documentation, collaborating with engineering on secure systems for rail and medical markets.

The role emphasizes risk analysis, SBOM creation, vulnerability management, and interactions with safety, quality, and product teams. English communication is essential.

Qualifikationen

• Degree in computer science, electrical engineering, cybersecurity or comparable field.
• At least two years of professional experience in product or embedded security.
• Knowledge of threat modeling (e.g., STRIDE) and risk analysis and of vulnerability assessment (CVSS, SCA).
• Experience with CRA/IEC62443, rail context is a plus.
• Understanding of embedded systems, networks and secure software architectures.
• Experience with TRA documentation and SBOM generation.
• Clear documentation and structured work approach.
• Fluent English and strong cross‑team communication.

Aufgaben

• Conduct Threat and Risk Analyses (TRA) with engineers and maintain artifacts.
• Assess vulnerabilities and derive countermeasures considering effectiveness and residual risk.
• Evaluate CRA conformity and document it in a structured, traceable manner.
• Create and maintain CRA technical documentation (risk assessment, SBOM, conformity evidence).
• Coordinate vulnerability management and coordinated disclosure throughout the lifecycle.
• Support secure development lifecycle (SDLC) and security-by-design in product development.
• Interface with safety, quality, and product management; advise engineering on security matters.
• Prepare for and participate in audits and conformity assessments.

Kenntnisse

Threat modelling & risk analysis

Vulnerability assessment

Embedded systems knowledge

Network & protocol knowledge

TRAdoc & SBOM tooling

English communication

Ausbildung

Degree in computer science / electrical engineering / cybersecurity

Tools

SBOM generation tools

Vulnerability tracking tools

Jobbeschreibung

duagon AG in Switzerland seeks a cybersecurity professional to bolster CRA compliance for embedded products across the full lifecycle. You will lead threat modeling, assess vulnerabilities, and ensure conformity with CRA documentation, collaborating with engineering on secure systems for rail and medical markets.

The role emphasizes risk analysis, SBOM creation, vulnerability management, and interactions with safety, quality, and product teams. English communication is essential.