Security Software Architect – Embedded Product Security

Isoskills; Helsinki; On-site; EUR 90,000 - 130,000; Full time

Job summary

IsoSkills is seeking a Senior Security Software Architect to support the security assessment and development of complex embedded products.

You will evaluate security architectures, review embedded Linux, hardware interfaces, and security controls such as TPM and secure boot, and collaborate with development teams to implement practical improvements.

Qualifications

• Strong background in software/product security architecture.
• Experience with embedded systems and embedded Linux.
• Knowledge of secure boot, TPM, cryptography, PKI and threat modelling.
• Understanding of hardware/software boundaries and complex system architectures.
• Experience working directly with development and architecture teams.

Responsibilities

• Assess product security architecture and identify security gaps.
• Review embedded Linux, hardware/software interfaces, APIs and communication protocols.
• Evaluate secure boot, TPM, certificates, device identity and access control.
• Perform threat modelling and security architecture reviews.
• Review CI/CD, dependencies and software supply-chain security.
• Define practical security improvements and support development teams with implementation.
• Assess compliance with relevant cybersecurity standards and the EU Cyber Resilience Act.

Skills

Security software architecture

Embedded systems

Embedded Linux

Threat modelling

Secure boot/TPM/PKI

Hardware/software boundaries

Cross-team collaboration

Job description

Security Software Architect – Embedded Product Security

We are looking for a Senior Security Software Architect to support the security assessment and development of complex embedded products.

Key responsibilities

• Assess product security architecture and identify security gaps.
• Review embedded Linux, hardware/software interfaces, APIs and communication protocols.
• Evaluate secure boot, TPM, certificates, device identity and access control.
• Perform threat modelling and security architecture reviews.
• Review CI/CD, dependencies and software supply-chain security.
• Define practical security improvements and support development teams with implementation.
• Assess compliance with relevant cybersecurity standards and the EU Cyber Resilience Act.

Required experience

• Strong background in software/product security architecture.
• Experience with embedded systems and embedded Linux.
• Knowledge of secure boot, TPM, cryptography, PKI and threat modelling.
• Understanding of hardware/software boundaries and complex system architectures.
• Experience working directly with development and architecture teams.

Nice to have: FPGA/MPSoC, container security, SBOM/CBOM, vulnerability assessment, IEC 62443, Common Criteria or ISO/SAE 21434.

Location:

Finland

Allocation:

Full-time, starting ASAP

About IsoSkills

IsoSkills is an IT consulting company that connects experienced technology professionals with leading organizations. We offer our consultants opportunities to work on interesting projects across software development, cloud technologies, testing, project management and digital transformation.

We focus on building long-term relationships with both our consultants and clients. Our goal is to find each consultant assignments where their skills and experience can be put to the best possible use.

We believe that experienced professionals deserve opportunities where their expertise truly makes a difference.