Embedded Security Specialist: Rail CRA & SDLC

duagon; Dietikon; Vor Ort; CHF 90.000 - 140.000; Vollzeit

Zusammenfassung

duagon is seeking a security-focused professional to support CRA compliance for embedded products across the lifecycle. You will drive threat analyses, assess vulnerabilities, and ensure conformity documentation while collaborating with engineering, safety, and quality teams.

The role emphasizes threat modeling, risk assessment, and SBOM generation within rail industry standards. Strong English communication and structured documentation are essential.

Qualifikationen

• Degree in CS, EE, cyber security or comparable field.
• At least two years of professional embedded security experience.
• Knowledge of threat modeling and risk analysis (STRIDE, attack-tree) and vulnerability assessment (CVSS, SCA).
• Experience with CRA and rail standards (IEC 62443, TS 50701/EN 50701, IEC 63452) is an advantage.
• Understanding of embedded systems, networks, protocols, and secure software architectures.
• Experience with TRA documentation and SBOM generation.
• Strong documentation and clear communication skills.
• Very good English; ability to collaborate with interdisciplinary teams.

Aufgaben

• Conduct TRA with engineers and maintain associated artifacts.
• Assess vulnerabilities and derive countermeasures considering effectiveness, effort, and residual risk.
• Evaluate CRA compliance and document conformity in a structured, traceable manner.
• Create and maintain CRA documentation (risk assessment, SBOM, conformity evidence).
• Contribute to vulnerability and patch management across the product lifecycle and disclosure process.
• Support security-by-design and the secure development lifecycle in product development.
• Interface with functional safety, quality, and product management; advise engineering on security matters.
• Prepare for and accompany audits and conformity assessments.

Kenntnisse

Threat modeling

Risk analysis

Vulnerability assessment

Documentation

Security lifecycle

Interdisciplinary collaboration

English communication

Ausbildung

Degree in computer science / electrical engineering / cyber security

Tools

SBOM generation

TRA tooling

Jobbeschreibung

duagon is seeking a security-focused professional to support CRA compliance for embedded products across the lifecycle. You will drive threat analyses, assess vulnerabilities, and ensure conformity documentation while collaborating with engineering, safety, and quality teams.

The role emphasizes threat modeling, risk assessment, and SBOM generation within rail industry standards. Strong English communication and structured documentation are essential.