Cybersecurity Engineer

DeepRec.ai; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Visa sponsorship

Relocation assistance

Zusammenfassung

DeepRec.ai in Berlin is seeking a security-focused technologist to own the security architecture for a robotics safety platform that is hardware-agnostic and retrofit-ready. You will drive threat models, CRA Annex I conformance, and IEC 62443-4-1/4-2 evidence for first deployments, partnering with safety engineers to keep safety and security as one property.

Visa sponsorship and relocation within Europe are supported.

Qualifikationen

• 5+ years in product or platform security with real software engineering fluency – production C and C++.
• Embedded Linux and firmware hardening, including secure boot chains.
• IEC 62443-4-1 and -4-2, ISO/IEC 27001, plus CRA Annex I and TARA literacy.
• Cloud security fluency.
• Cryptographic primitives and PKI run in production.

Aufgaben

• Design end-to-end platform security: supply chain, build pipeline, deployed runtime, update channel
• Deliver CRA Annex I conformance and IEC 62443-4-1 / -4-2 evidence base for first customer deployment
• Run TARA on every integration and turn findings into shipped mitigations
• Own incident-response readiness, pen-test relationships, and the security artefacts customers actually audit
• Work alongside the safety engineer so safety and security stay one property, not two workstreams
• Set the secure engineering bar for the team

Kenntnisse

Security architecture

Threat modeling

C/C++ production

Embedded Linux

Cloud security

PKI in production

Jobbeschreibung

An early-stage, well-backed robotics safety business in Berlin. They build certifiable, hardware-agnostic safety systems that let autonomous machines operate around people — retrofittable onto existing platforms rather than tied to one vendor's controller. Small, senior team, already deploying with recognised robotics partners.

The role

A robot that can be compromised is a robot that can't be trusted, security is the other half of the safety guarantee here. With the EU Cyber Resilience Act now in force (reporting obligations from September 2026, full application December 2027), this is a build-it-properly-from-the-start role. You'll own the security architecture, the threat model, and the evidence base that gets the product through every customer security review and regulator conversation.

• Design end-to-end platform security: supply chain, build pipeline, deployed runtime, update channel
• Deliver CRA (Regulation (EU) 2024/2847) Annex I conformance and the IEC 62443-4-1 / -4-2 evidence base for first customer deployment
• Run TARA on every integration and turn findings into shipped mitigations
• Own incident-response readiness, pen-test relationships, and the security artefacts customers actually audit
• Work alongside the safety engineer so safety and security stay one property, not two workstreams
• Set the secure engineering bar for the team

What you\'ll need

• 5+ years in product or platform security, with real software engineering fluency - production C and C++
• Embedded Linux and firmware hardening, including secure boot chains
• IEC 62443-4-1 and -4-2, ISO/IEC 27001, plus working literacy in CRA Annex I and TARA methodology
• Cloud security fluency
• Cryptographic primitives and PKI run in production

What\'s on offer

A core-team seat with genuine ownership of the security architecture, direct line to live customer deployments, and equity through the company\'s incentive plan. Visa sponsorship and relocation within Europe supported.

Process: intro call, technical conversation, deep-dive session, offer. Two to three weeks start to finish.