Senior Cybersecurity Engineer (m/f/d)

Companies; München; Hybrid; EUR 90.000 - 140.000; Vollzeit

Benefits dieser Stelle

Bonus opportunity

27 vacation days increase to 30

Employer-supported pension

Learning & development support

Probonio benefits budget

Hybrid working setup

Structured salary bands & leveling

Relocation support where applicable

Dog-friendly office

Zusammenfassung

ARX Robotics is seeking a Sr. Cybersecurity Engineer to drive product security across the full lifecycle of its autonomous ground systems.

You will collaborate with software, systems, and cloud teams to ensure secure-by-default products that withstand real-world threats. You will shape security requirements, perform threat modeling, and lead architecture reviews while embedding security into CI/CD and supply chain practices.

Qualifikationen

• 7+ years in product security or secure software development.
• Experience with security architecture reviews and threat modeling.
• Hands-on security testing: SAST, DAST, SCA, fuzzing, pentesting.
• Cloud-native, APIs, containers, and microservices security.
• Familiarity with defense, embedded, or OT security assets is a plus.
• Strong communication with engineers, leadership, customers, and auditors.
• Security certifications (CSSLP, CISSP, GWAPT) are a plus.

Aufgaben

• Define a robust product security program with requirements, standards, and best practices for engineering teams.
• Perform threat models and security risk assessments for new and existing products.
• Lead security architecture reviews and feed mitigations into design decisions.
• Foster a DevSecOps culture with automated security testing in CI/CD pipelines.
• Promote secure supply chain practices and evaluate third-party components.
• Oversee vulnerability management, triage, remediation, and disclosures.
• Provide security guidance and targeted training to engineers and teams.
• Ensure compliance with IEC 62443, EU regulations, NIST SP 800-82, and CRA 2024/2847.

Kenntnisse

Product security

Threat modeling

Security architecture

SAST

DAST

SCA

Penetration testing

Cloud security

API security

Container security

Microservices security

Secure boot

HSMs

Firmware integrity

Communication skills

CSSLP

CISSP

GWAPT

Ausbildung

Bachelor's degree in Computer Science / Cybersecurity / Software Engineering

Jobbeschreibung

About the Role

At ARX Robotics, security is not an afterthought. It is designed in from day one. As our Sr. Cybersecurity Engineer, you will be the driving force behind product security across the full lifecycle of our autonomous ground systems, from early architecture through deployment and beyond. You will work side by side with software, systems, and cloud engineering teams to ensure that everything we ship is resilient, trustworthy, and built to withstand real-world threats.

This is a role for someone who thrives at the intersection of deep technical expertise and cross-functional influence. You will shape how ARX builds products, not just review them after the fact.

What You’ll Build

• A robust product security program, including requirements, standards, and best practices that engineering teams can actually use.
• Threat models and security risk assessments for new and existing products, using methodologies such as STRIDE and ATT&CK.
• Security architecture reviews that identify risks early and feed practical mitigations directly into product design decisions.
• A DevSecOps culture, integrating automated security testing into CI/CD pipelines and championing secure-by-default principles across development.
• Secure supply chain practices, including rigorous evaluation of third-party components, open-source dependencies, and software bills of materials.
• Vulnerability management processes that span internal triage, remediation tracking, and transparent customer‑facing disclosures.
• Security guidance and targeted training that raises the security bar across engineering teams, not just within a dedicated function.
• Compliance alignment with relevant frameworks, including IEC 62443, EU Machinery Regulation 2023/1230, prEN 50742, NIST SP 800-82, and the Cyber Resilience Act (CRA) 2024/2847.

What You Bring

• 7+ years of experience in product security, application security, or secure software development, ideally within complex or regulated product environments.
• A degree in Computer Science, Cybersecurity, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
• Solid command of secure development principles, including authentication, authorization, encryption, secrets management, and secure communications.
• Hands-on experience with security architecture reviews, threat modeling, and a range of security testing methods (SAST, DAST, SCA, fuzzing, penetration testing).
• Practical experience with cloud-native applications, APIs, containers, and microservices, and the security challenges they introduce.
• Familiarity with defense, embedded, or operational technology security: secure boot, HSMs, firmware integrity, or teleoperation system security are all genuine assets.
• Strong communication skills and the ability to engage effectively with engineering teams, leadership, customers, and auditors.
• Relevant security certifications (such as CSSLP, CISSP, GWAPT, or cloud security credentials) are a plus, not a prerequisite.

Please note: You do not need to meet every single requirement to apply. We welcome motivated candidates who are eager to grow into the role and develop their expertise further.

What We Offer

Join a mission-driven European defense tech company at a pivotal stage of growth, where you can help shape meaningful technology, take ownership early, and grow with the business!

• Competitive compensation package including a bonus opportunity
• 27 vacation days to start, increasing with tenure up to 30 days
• Employer-supported pension contribution
• Learning & development support and team events budget
• Employee discounts and flexible benefits budget via Probonio
• Hybrid working setup depending on role and team needs
• Structured salary bands, levelling framework, and bi-annual development conversations
• Referral bonus program, dog-friendly office, and relocation support where applicable

About Us

ARX is a dual-use technology company that specializes in developing autonomous unmanned systems and sensors for the European defence sector. Our dual-use unmanned ground systems and sensors assist NATO Armies and civilian first responders in tackling their most challenging problems by providing them with training and information to make better decisions and take effective actions in life-or-death situations.

As our team continues to expand rapidly, we are seeking motivated candidates who are excited to work in a highly energetic, creative, and innovative team dedicated to developing autonomous systems for challenging environments. We operate in a dynamic sector where collaboration, sharing innovative ideas, and developing novel problem‑solving strategies are ingrained in our work culture.

ARX is an equal-opportunity employer, and we encourage candidates from all backgrounds to apply.

You can find ARX Robotics Applicant Privacy Policy here.