Senior Systems Engineer - Product Security (m/f/d)

United States Digital Space LLC; München; Vor Ort; EUR 110.000 - 160.000; Vollzeit

Benefits dieser Stelle

Flexible work schedules

30 days paid vacation

Lunch budget

Wellness membership

Zusammenfassung

Fernride is building the future of autonomous logistics by combining automation tech with human-guided teleoperations. You will own product security from the ground up, defining the threat landscape and driving defense-in-depth across the platform.

As a senior cybersecurity expert, you will collaborate with safety engineers, design assurance, hardware/software teams and V&V to translate security measures into concrete technical requirements and review designs for risks and attack surfaces.

Qualifikationen

• Deep expertise in cybersecurity management and engineering for embedded systems.
• Experience with threat analysis and risk assessment (TARA).
• Knowledge of supply chain security and SBOM management.
• Experience with secure development lifecycle practices (code review, static analysis).
• Ability to translate security measures into concrete technical requirements.

Aufgaben

• Design Assurance – sicherstellen, dass sicherheitsrelevante Funktionen in Hardware/Software/ML umgesetzt werden.
• Safety & Threat Analysis – perform FMEA/FMECA, risk analyses, and attack-path identification.
• Technical Architecture – define security controls and trust boundaries.
• Requirements Management – maintain system requirements with traceability for safety and security.
• Verification & Validation – define test criteria and review V&V artefacts.
• Compliance – support regulatory requirements and documentation.
• Supply Chain Security – evaluate third-party components and SBOM management.
• Operational Measures – incident response, monitoring, and patch management.
• Cross-Functional Collaboration – work with System Safety, Security, Design Assurance and Engineering teams.
• AI-Assisted Workflows – develop AI-supported security analysis processes.

Kenntnisse

Cybersecurity management

Embedded systems engineering

Threat analysis

Supply chain security

Secure development lifecycle

CI/CD security gates

Collaboration with safety engineers

AI-assisted workflows

Tools

GitHub

VS Code

Bazel

Markdown

Jobbeschreibung

Fernride is building the future of autonomous logistics by combining advanced automation technology with human‑guided teleoperations. We enable logistics companies to transition toward safer, more efficient, and more sustainable driverless operations. With strong expertise in robotics, AI, and automotive engineering, Fernride delivers scalable solutions that bring real‑world autonomy to industrial environments.

The Quantum Systems Land Domain is developing leading-edge autonomous UGV technology for defense — a domain where no blueprint exists. The product strategy starts with a UGV that is useful on today’s battlefields and can be built with current technology, then progressively increases the authority of the autonomy system while reducing the need for human supervision — across ever more complex operating environments, up to fully autonomous operation in proximity to civilians.

As a senior cybersecurity expert, you will own and shape product security from the ground up: define the threat landscape, build the security processes, and drive defense-in-depth across the platform. You will work closely with system safety engineers, design assurance, hardware/software engineering teams, and V&V to ensure cybersecurity is embedded across the full product lifecycle. As the product matures, you will grow your domain into a team.

What is your Day to Day Mission:

• Design Assurance – Sicherstellen, dass sicherheits- und sicherheitsrelevante Funktionen korrekt in Hardware, Software und ML umgesetzt werden.

• Safety & Threat Analysis – Durchführung von FMEA/FMECA, Risikoanalysen und TARA zur Identifikation von Fehlermodi, Bedrohungen und Angriffspfaden.

• Technical Architecture – Mitgestaltung der technischen Architektur inkl. Safety‑Mechanismen, Security Controls, Trust Boundaries und Safe‑State‑Strategien.

• Requirements Management – Pflege der Systemanforderungen mit vollständiger Traceability für Safety, Security und Compliance.

• Verification & Validation – Definition von Testkriterien, Fault‑Injection‑ und Penetration‑Test‑Scopes; Review von V&V‑Nachweisen.

• Compliance – Unterstützung bei regulatorischen Anforderungen (z.B. LVD, EMC, CRA, RED‑Security, AI‑Act‑Security) und Pflege relevanter Dokumentation.

• Supply Chain Security – Bewertung von Drittanbieter‑Komponenten, SBOM‑Pflege und sichere Beschaffungsanforderungen.

• Operational Measures – Definition von Incident Response, Monitoring, Patch‑Management und Schlüsselverwaltung.

• Cross‑Functional Collaboration – Enge Zusammenarbeit mit System Safety, Product Security, Design Assurance und Engineering‑Teams.

• Implementation Guidance – Übersetzung von Safety‑ und Security‑Maßnahmen in konkrete technische Vorgaben; Review von Designs auf Fehlermodi und Angriffsflächen.

• AI‑Assisted Workflows – Entwicklung KI‑gestützter Prozesse für Analyse, Traceability und Compliance.

What you bring to the team:

• Deep expertise in cybersecurity management and engineering for embedded

• systems, with an engineering mindset and hands‑on attitude.

• Understanding of IT and embedded systems technology, and state‑of‑the‑art security controls and approaches.

• Experience with threat analysis and risk assessment (TARA), attacker modeling, and defense‑in‑depth architecture for resource‑constrained platforms.

• Experience with supply chain security — CVE tracking, SBOM management, secure procurement requirements.

• Understanding of secure development lifecycle practices — code review, static analysis, dependency scanning, CI/CD security gates.

• Strong collaboration skills — you work closely with safety engineers, hardware/software teams, and V&V to find feasible solutions that don’t cause unacceptable cybersecurity risks.Interest in AI‑assisted engineering workflows and willingness to shape how AI tools support security analysis and compliance management.

• Comfortable working with software development tools — GitHub, VS Code, Bazel, Markdown, CI/CD pipelines — to operate and evolve the AI‑assisted methodology.

Your Benefits:

• Direct impact: See your contributions rapidly integrated from cutting‑edge research into industrialized products, flying in the field within short development cycles.

• Culture & Environment: A dynamic, fast‑paced, and collaborative startup environment with flat hierarchies, efficient collaboration, and a strong emphasis on continuous learning opportunities.

• Work‑life Balance: We offer flexible work schedules, and 30 days of paid vacation each year to support your personal and professional life.

• Lunch Benefit: We promote healthy eating and the well‑being of our employees with a monthly lunch budget.

• Health & Wellness: We support your physical well‑being with a company‑subsidized eGym Wellpass membership, giving you access to thousands of gyms and sports facilities.

Find more English Speaking Jobs in Germany on Arbeitnow