cybersecurity engineer (m/w/d)

coera robotics; Berlin; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Supply-chain security frameworks

German or Persian language bonus

Zusammenfassung

coera robotics is building the universal safety intelligence layer for human-robot coexistence. We seek a security leader to own the end-to-end security architecture across supply chain, build pipeline, runtime, and update channels.

You will deliver CRA Annex I conformance and IEC 62443-4-1/4-2 evidence, run threat modelling on every integration, and maintain incident-response readiness. You will align safety and security as one property and shape secure engineering across the team.

Qualifikationen

• Five+ years in product or platform security with hands-on software fluency.
• Production code experience in C and C++.
• Hardening embedded Linux and firmware including secure boot chains.
• IEC 62443-4-1/4-2 and ISO/IEC 27001 knowledge, CRA Annex I and TARA literacy.

Aufgaben

• Design end-to-end security architecture across the platform (supply chain, build pipeline, runtime, update channel).
• Deliver CRA Annex I conformance and IEC 62443 evidence for initial deployment.
• Run threat modelling (TARA) on integrations and translate findings to mitigations.
• Own incident-response readiness and penetration-testing relationships; maintain security artefacts.
• Collaborate with safety engineers to fuse safety and security as one property; set secure engineering standards.

Kenntnisse

Security engineering

C & C++ production code

Embedded Linux hardening

CRA Annex I & IEC 62443

Cloud security

PKI & cryptography

Safety-security integration

Jobbeschreibung

why this role matters

A robotic agent that can be compromised is a robotic agent that cannot be trusted. Security is the shadow half of coera's safety guarantee. The EU Cyber Resilience Act is in force, reporting obligations start September 2026, and full application follows in December 2027. You will own the security architecture, the threat model, and the evidence base that lets coera pass every customer security review and every regulator briefing.

why this role matters

A robotic agent that can be compromised is a robotic agent that cannot be trusted. Security is the shadow half of coera's safety guarantee. The EU Cyber Resilience Act is in force, reporting obligations start September 2026, and full application follows in December 2027. You will own the security architecture, the threat model, and the evidence base that lets coera pass every customer security review and every regulator briefing.

What You Will Own

• Design the end-to-end security architecture of coera's platform: supply chain, build pipeline, deployed runtime, update channel.
• Deliver CRA (Regulation (EU) 2024/2847) Annex I conformance and the IEC 62443-4-1 and -4-2 evidence base for the first customer deployment.
• Run threat modelling (TARA) on every integration and turn findings into shipped mitigations.
• Own incident-response readiness, penetration-testing relationships, and the security artefacts that pass customer review.
• Work closely with the safety engineer to keep safety and security as one property.
• Set the bar for secure engineering practice across the team.

What We Look For

Must have

• At least five years in product or platform security, with hands-on software engineering fluency. Production code in C and C++.
• Hardening embedded Linux and firmware, including secure boot chains.
• IEC 62443-4-1 and -4-2 and ISO/IEC 27001, with working literacy in CRA Annex I and TARA methodology.
• Cloud security fluency.
• Cryptographic primitives and PKI operated in production.

Strong signals

• Prior work on a safety-certified or functionally safe product. The single most valuable signal for coera because it means you already treat security and safety as one property.
• Published vulnerability research, CVEs, or speaking record at Black Hat, DEF CON, Pwn2Own, OffensiveCon, CCC, or Troopers.
• Cyber-physical attack surfaces and hardware-level threats: anti-tamper, reverse engineering.
• CRA, NIS2, or Machinery Regulation 2023/1230 fluency demonstrated in shipped product.
• AI and ML system security literacy: model weight protection, model supply chain, adversarial inputs.

Bonus

• Supply-chain and code-signing frameworks.
• German or Farsi in addition to English.

What We Offer

A core team role with real ownership over what we build and how. Direct line to deployments with leading robotics partners from day one. Post-thesis, pre-scale: the window where the work you do actually compounds.

How We Work

Small, senior, deliberate. We write more than we meet. We ship the core of the product before we ship the edges. We care about craft in code, policy design, and how we engage with customers. The bar is high, and the stakes are high: the safety layer of the robotics revolution is being built now, and we intend to be the one that defines it.

process and small print

Hiring process.

A short intro call, a technical conversation tailored to the role, a deeper-dive session (onsite or remote), and an offer. Typical time from application to offer is two to three weeks. We move fast when we meet the right person.

Visa and relocation.

We support visa sponsorship and relocation within Europe where it makes the difference between hiring the right person and not.

Equal opportunity.

We hire on the strength of the work. We do not discriminate on the basis of ethnic origin, gender, religion or belief, disability, age, sexual identity, or anything else unrelated to the job. We explicitly welcome applications from people with disabilities and give them equal consideration.

Your data.

We process your application data under the GDPR to run this hiring process. If we do not hire you, we keep your data for up to six months afterwards so we can respond to any questions or legal claims, then delete it. If you would like us to keep your details longer for future roles, we will ask for your separate consent. You can ask us to delete your data at any time. Find our privacy policy here: https://coera.jobs.personio.com/privacy-policy

About Us

coera is building the universal safety intelligence layer for human-robot coexistence, redefining what safety means in the age of physical AI. Robotics is advancing faster than the safety systems meant to support it. coera closes that gap with multimodal sensing and deterministic guardrails: retrofittable, embeddable, controller-agnostic. Safety is not a checkpoint or a constraint. It is the capability that lets intelligent machines operate freely wherever people do.