Senior Cybersecurity Engineer (m/f/d)

ARX Robotics; München; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Bonus opportunity

27 vacation days

Pension contribution

Learning & development budget

Flexible benefits budget

Hybrid work setup

Salary bands & leveling

Relocation support

Referral program

Zusammenfassung

ARX Robotics is seeking a Sr. Cybersecurity Engineer to lead product security across the full lifecycle of our autonomous ground systems. You will collaborate with software, systems, and cloud teams to ensure security by design and secure deployment.

The role emphasizes deep technical expertise, cross-functional influence, and shaping how ARX builds secure products for real-world operations. Join a team driving resilient dual-use technology.

Qualifikationen

• 7+ years of experience in product security or secure software development.
• Degree in Computer Science, Cybersecurity, Software Engineering, Electrical Engineering, or related field, or equivalent practical experience.
• Solid command of secure development principles: authentication, authorization, encryption, secrets management, and secure communications.
• Hands-on with security architecture reviews, threat modeling, and testing methods (SAST, DAST, SCA, fuzzing, pentesting).
• Practical experience with cloud-native applications, APIs, containers, and microservices security.
• Familiarity with defense, embedded, or OT security: secure boot, HSMs, firmware integrity, or teleoperation security.
• Strong communication skills with engineers, leadership, customers, and auditors.
• Security certifications (CSSLP, CISSP, GWAPT, or cloud security credentials) are a plus.

Aufgaben

• Establish and maintain a robust product security program with clear requirements and standards.
• Create threat models and security risk assessments for new and existing products.
• Perform security architecture reviews and feed mitigations into product design decisions.
• Champion DevSecOps by integrating automated security testing into CI/CD pipelines and secure-by-default practices.
• Implement secure supply chain practices, evaluating third-party components and SBOMs.
• Lead vulnerability management across triage, remediation tracking, and disclosures to customers.
• Provide security guidance and targeted training across engineering teams and with auditors.
• Align security with IEC 62443, EU Machinery Regulation, NIST SP 800-82, CRA 2024/2847.

Kenntnisse

Product security

Application security

Secure software development

Threat modeling

Security testing

Cloud-native security

Communication

Security certifications

Ausbildung

Bachelor's degree in CS / Cybersecurity

Tools

SAST tooling

DAST tooling

SCA tooling

Fuzzing tools

Penetration testing

Jobbeschreibung

About The Role

At ARX Robotics, security is not an afterthought. It is designed in from day one. As our Sr. Cybersecurity Engineer, you will be the driving force behind product security across the full lifecycle of our autonomous ground systems, from early architecture through deployment and beyond. You will work side by side with software, systems, and cloud engineering teams to ensure that everything we ship is resilient, trustworthy, and built to withstand real-world threats.

This is a role for someone who thrives at the intersection of deep technical expertise and cross-functional influence. You will shape how ARX builds products, not just review them after the fact.

What You’ll Build

• A robust product security program, including requirements, standards, and best practices that engineering teams can actually use.
• Threat models and security risk assessments for new and existing products, using methodologies such as STRIDE and ATT&CK.
• Security architecture reviews that identify risks early and feed practical mitigations directly into product design decisions.
• A DevSecOps culture, integrating automated security testing into CI/CD pipelines and championing secure-by-default principles across development.
• Secure supply chain practices, including rigorous evaluation of third‑party components, open‑source dependencies, and software bills of materials.
• Vulnerability management processes that span internal triage, remediation tracking, and transparent customer‑facing disclosures.
• Security guidance and targeted training that raises the security bar across engineering teams, not just within a dedicated function.
• Compliance alignment with relevant frameworks, including IEC 62443, EU Machinery Regulation 2023/1230, prEN 50742, NIST SP 800‐82, and the Cyber Resilience Act (CRA) 2024/2847.

What You Bring

• 7+ years of experience in product security, application security, or secure software development, ideally within complex or regulated product environments.
• A degree in Computer Science, Cybersecurity, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
• Solid command of secure development principles, including authentication, authorization, encryption, secrets management, and secure communications.
• Hands‑on experience with security architecture reviews, threat modeling, and a range of security testing methods (SAST, DAST, SCA, fuzzing, penetration testing).
• Practical experience with cloud‑native applications, APIs, containers, and microservices, and the security challenges they introduce.
• Familiarity with defense, embedded, or operational technology security: secure boot, HSMs, firmware integrity, or teleoperation system security are all genuine assets.
• Strong communication skills and the ability to engage effectively with engineering teams, leadership, customers, and auditors.
• Relevant security certifications (such as CSSLP, CISSP, GWAPT, or cloud security credentials) are a plus, not a prerequisite.

Please note: You do not need to meet every single requirement to apply. We welcome motivated candidates who are eager to grow into the role and develop their expertise further.

What We Offer

• Competitive compensation package including a bonus opportunity
• 27 vacation days to start, increasing with tenure up to 30 days
• Employer‑supported pension contribution
• Learning & development support and team events budget
• Employee discounts and flexible benefits budget via Probonio
• Hybrid working setup depending on role and team needs
• Structured salary bands, levelling framework, and bi‑annual development conversations
• Referral bonus program, dog‑friendly office, and relocation support where applicable

About Us

ARX is a dual‑use technology company that specializes in developing autonomous unmanned systems and sensors for the European defence sector. Our dual‑use unmanned ground systems and sensors assist NATO Armies and civilian first responders in tackling their most challenging problems by providing them with training and information to make better decisions and take effective actions in life‑or‑death situations.

As our team continues to expand rapidly, we are seeking motivated candidates who are excited to work in a highly energetic, creative, and innovative team dedicated to developing autonomous systems for challenging environments. We operate in a dynamic sector where collaboration, sharing innovative ideas, and developing novel problem‑solving strategies are ingrained in our work culture.

If you are passionate about overcoming challenges that have a real impact on the security of our democracies, apply here to join ARX and help shape the future of dual‑use technology!

ARX is an equal‑opportunity employer, and we encourage candidates from all backgrounds to apply.

You can find ARX Robotics Applicant Privacy Policy here.