IoT Product Security & Compliance Engineer

Jobgether; France; Sur place; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Remote work

Competitive salary (75th percentile)

25 days paid leave

Paid sick leave

Parental leave

Work hardware budget

Home smart-home budget

Internet stipend

Personal project days

Résumé du poste

Jobgether is seeking a Product Security & Compliance Engineer in France for a partner company. You will lead hands-on security engineering and regulatory compliance for connected hardware and cloud services, from threat modeling to SBOM management, across hardware, firmware, and software.

You will document conformity, support EU cybersecurity acts, coordinate with hardware, firmware, cloud teams and external certification bodies, and promote privacy-by-design and secure development practices in

Qualifications

• Strong hands-on experience in at least one security domain (embedded/firmware, network, app or cloud).
• Experience creating architecture or data-flow diagrams and performing threat modeling.
• Experience with security testing tools and vulnerability assessments.
• Experience with connected products, IoT, or hardware–software–cloud environments.
• Ability to translate security findings into documentation, risk assessments and compliance requirements.
• Knowledge of EN 18031, RED, EU Cyber Resilience Act, ETSI EN 303 645, IEC 62443 or comparable frameworks.
• Strong written and verbal communication; fluent English.
• OSCP/GIAC/CISSP/CIPP/E/CIPT are a plus.

Responsabilités

• Own cybersecurity aspects of regulatory compliance for connected hardware products (RED, EN 18031).
• Support EU Cyber Resilience Act readiness including SBOMs, vulnerability management and incident reporting.
• Create and maintain architecture and data-flow diagrams for products and services.
• Conduct threat modeling and translate risks into security requirements and priorities.
• Perform hands-on security validation: SAST/DAST, SBOM, firmware analysis, network assessments, pen tests.
• Translate assessments into conformity evidence and Declarations of Conformity.
• Collaborate with hardware, firmware, cloud, and product teams to embed security early.
• Coordinate with external manufacturing and certification bodies; manage cybersecurity evidence.

Connaissances

Embedded security

Threat modeling

Security testing

IoT security

Documentation

Secure development

English communication

Regulatory standards

Outils

SBOM tooling

Vulnerability scanning tools

SAST/DAST tools

Firmware analysis tools

Description du poste

Jobgether is seeking a Product Security & Compliance Engineer in France for a partner company. You will lead hands-on security engineering and regulatory compliance for connected hardware and cloud services, from threat modeling to SBOM management, across hardware, firmware, and software.

You will document conformity, support EU cybersecurity acts, coordinate with hardware, firmware, cloud teams and external certification bodies, and promote privacy-by-design and secure development practices in