Senior Cybersecurity Engineer (m/f/d)

ARX Robotics GmbH; München; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Bonus opportunity

27 vacation days

Learning & development budget

Employee discounts

Hybrid working setup

Bi-annual development conversations

Relocation support

Zusammenfassung

ARX Robotics GmbH is seeking a Sr. Cybersecurity Engineer to drive product security across the lifecycle of our autonomous ground systems.

You will partner with software, systems, and cloud teams to ensure resilience, trustworthiness, and secure-by-default design. You will build a robust security program, conduct threat modeling, perform architecture reviews, and champion DevSecOps and secure supply chain practices.

Qualifikationen

• 7+ years of experience in product security or secure software development.
• Degree in CS, Cybersecurity, or related field, or equivalent practical experience.
• Solid knowledge of authentication, authorization, encryption, secrets management, and secure communications.
• Hands-on security architecture reviews, threat modeling, and testing methods (SAST/DAST/SCA/fuzzing/penetration testing).
• Experience with cloud-native applications, APIs, containers, and microservices, and the security challenges they introduce.
• Familiarity with defense, embedded, or OT security: secure boot, HSMs, firmware integrity, or teleoperation security assets.
• Strong communication skills to engage with engineering teams, leadership, customers, and auditors.
• Security certifications (such as CSSLP, CISSP, GWAPT, or cloud security credentials) are a plus.

Aufgaben

• Establish a robust product security program with practical requirements and standards.
• Develop threat models and risk assessments for new and existing products.
• Perform security architecture reviews and feed mitigations into product design decisions.
• Champion DevSecOps by integrating automated security testing into CI/CD pipelines.
• Define secure supply chain practices and evaluate third-party components.
• Lead vulnerability management across triage, remediation, disclosures.
• Provide security guidance and targeted training across engineering teams.
• Align with relevant frameworks (IEC 62443, EU Machinery Regulation, NIST SP 800-82, CRA) and ensure governance.

Kenntnisse

Threat modeling

Security architecture reviews

Security testing

Cloud security

Communication with stakeholders

Secure coding practices

Security certifications

Ausbildung

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

SCA

Fuzzing

Penetration testing

Cloud platforms (AWS/Azure)

Jobbeschreibung

At ARX Robotics, security is not an afterthought. It is designed in from day one. As our Sr. Cybersecurity Engineer, you will be the driving force behind product security across the full lifecycle of our autonomous ground systems, from early architecture through deployment and beyond. You will work side by side with software, systems, and cloud engineering teams to ensure that everything we ship is resilient, trustworthy, and built to withstand real-world threats.

This is a role for someone who thrives at the intersection of deep technical expertise and cross-functional influence. You will shape how ARX builds products, not just review them after the fact.

What You'll Build

• A robust product security program, including requirements, standards, and best practices that engineering teams can actually use.
• Threat models and security risk assessments for new and existing products, using methodologies such as STRIDE and ATT&CK.
• Security architecture reviews that identify risks early and feed practical mitigations directly into product design decisions.
• A DevSecOps culture, integrating automated security testing into CI/CD pipelines and championing secure-by-default principles across development.
• Secure supply chain practices, including rigorous evaluation of third-party components, open-source dependencies, and software bills of materials.
• Vulnerability management processes that span internal triage, remediation tracking, and transparent customer-facing disclosures.
• Security guidance and targeted training that raises the security bar across engineering teams, not just within a dedicated function.
• Compliance alignment with relevant frameworks, including IEC 62443, EU Machinery Regulation 2023/1230, prEN 50742, NIST SP 800-82, and the Cyber Resilience Act (CRA) 2024/2847.

What You Bring

• 7+ years of experience in product security, application security, or secure software development, ideally within complex or regulated product environments.
• A degree in Computer Science, Cybersecurity, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
• Solid command of secure development principles, including authentication, authorization, encryption, secrets management, and secure communications.
• Hands‑on experience with security architecture reviews, threat modeling, and a range of security testing methods (SAST, DAST, SCA, fuzzing, penetration testing).
• Practical experience with cloud‑native applications, APIs, containers, and microservices, and the security challenges they introduce.
• Familiarity with defense, embedded, or operational technology security: secure boot, HSMs, firmware integrity, or teleoperation system security are all genuine assets.
• Strong communication skills and the ability to engage effectively with engineering teams, leadership, customers, and auditors.
• Relevant security certifications (such as CSSLP, CISSP, GWAPT, or cloud security credentials) are a plus, not a prerequisite.

Please note: You do not need to meet every single requirement to apply. We welcome motivated candidates who are eager to grow into the role and develop their expertise further.

What We Offer

Join a mission-driven European defense tech company at a pivotal stage of growth, where you can help shape meaningful technology, take ownership early, and grow with the business!

• Competitive compensation package including a bonus opportunity
• 27 vacation days to start, increasing with tenure up to 30 days
• Learning & development support and team events budget
• Employee discounts and flexible benefits budget via Probonio
• Hybrid working setup depending on role and team needs
• Structured salary bands, levelling framework, and bi-annual development conversations
• Referral bonus program, dog-friendly office, and relocation support where applicable

About Us

ARX is a dual-use technology company that specializes in developing autonomous unmanned systems and sensors for the European defence sector. Our dual-use unmanned ground systems and sensors assist NATO Armies and civilian first responders in tackling their most challenging problems by providing them with training and information to make better decisions and take effective actions in life-or-death situations.
As our team continues to expand rapidly, we are seeking motivated candidates who are excited to work in a highly energetic, creative, and innovative team dedicated to developing autonomous systems for challenging environments. We operate in a dynamic sector where collaboration, sharing innovative ideas, and developing novel problem-
solving strategies are ingrained in our work culture.
If you are passionate about overcoming challenges that have a real impact on the security of our democracies, help shape the future of dual-use technology!
ARX is an equal-opportunity employer, and we encourage candidates from all backgrounds to apply.

You can find ARX Robotics Applicant Privacy Policyhere .