CRA Lead – Secure Software Development

Codvo.ai; Hyderabad; On-site; INR 1,500,000 - 2,500,000; Full time

Benefits offered by this job

Opportunity to lead pioneering practices

High-impact projects across industries

Collaborative work environment with a world-class team

Job summary

A technology solutions company in Hyderabad is looking for a CRA Lead to establish secure development practices in compliance with the EU Cyber Resilience Act. The ideal candidate will have extensive experience in software engineering and cybersecurity, along with leadership skills to guide a team in implementing secure practices across multiple technologies. Join a mission-driven organization focused on building resilient digital systems.

Qualifications

• 7-10 years of experience in software engineering, cybersecurity, or compliance.
• Proven experience in secure software development across multiple platforms.
• Good understanding of cybersecurity regulations including CRA and NIS2.
• Hands-on experience with secure SDLC and DevSecOps.

Responsibilities

• Execute the vision for a CRA-aligned secure development practice.
• Collaborate with product, legal, and security teams for CRA compliance.
• Lead the implementation of automated compliance checks.

Skills

Software engineering

Cybersecurity

Compliance

Stakeholder management

Leadership

Education

Bachelor’s or Master’s degree in Computer Science

Tools

Secure SDLC tools

DevSecOps tools

Software composition analysis tools

Job description

CRA Lead – Secure Software Development

Reports To: CRA Practice Lead

Department: Cyber Resilience & Compliance Engineering

About Us

At Codvo, we are committed to building scalable, future-ready data platforms that power business impact. We believe in a culture of innovation, collaboration, and growth, where engineers can experiment, learn, and thrive. Join us to be part of a team that solves complex data challenges with creativity and cutting‑edge technology.

About the Role

We are seeking a CRA Lead to establish and scale a cross‑platform, cross‑technology development and testing practices aligned with the EU Cyber Resilience Act (CRA). This role will focus on enabling secure‑by‑design software development, continuous compliance testing, and codebase certification across a wide range of technologies, platforms, and deployment models (cloud, edge, embedded, on‑prem).

Key Responsibilities

Practice Leadership

• Execute the vision, strategy, and operating model for a CRA‑aligned secure development and certification practice.
• Build and lead a high‑performing team across secure development, compliance testing, and DevSecOps.
• Collaborate with product, legal, and security teams to interpret CRA requirements and embed them into engineering workflows.

Secure Development & Architecture

• Establish secure‑by‑design principles across diverse technology stacks (e.g., web, mobile, embedded, cloud‑native, edge).
• Drive adoption of secure SDLC practices including threat modeling, secure architecture reviews, and secure coding standards.
• Ensure integration of security controls across heterogeneous environments and third‑party components.

Compliance & Certification

• Operationalize CRA‑aligned testing and documentation processes across all software delivery pipelines.
• Lead the implementation of automated compliance checks, SBOM generation, and vulnerability management.
• Ensure traceability, audit readiness, and conformity assessment support for CRA and related regulations (e.g., NIS2, ISO 27001).

Tooling & Automation

• Implement a technology‑agnostic toolchain for secure development, testing, and compliance automation.
• Integrate security and compliance tooling into CI/CD pipelines across multiple platforms and languages.
• Promote reuse of security patterns, templates, and automation assets across teams.

Stakeholder Engagement

• Act as the technical authority on CRA compliance for internal teams, partners, and clients.
• Support pre‑sales, solutioning, and proposal development for CRA‑related services.
• Represent the practice in regulatory, industry, and standards forums.

Required Skills & Experience

• 7‑10 years of experience in software engineering, cybersecurity, or compliance, with at least 2 years in a lead/senior role.
• Proven experience in secure software development across multiple platforms (e.g., cloud, mobile, embedded, edge).
• Good understanding of cybersecurity regulations including CRA, NIS2, and global standards.
• Hands‑on experience with secure SDLC, DevSecOps, and software composition analysis (SCA) tools.
• Familiarity with SBOM standards (e.g., SPDX, CycloneDX) and vulnerability disclosure processes.
• Excellent communication, leadership, and stakeholder management skills.

Preferred Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.
• Experience working in regulated industries (e.g., MedTech, Industrial, Automotive, Fintech).
• Exposure to open‑source governance, third‑party risk management, and secure supply chain practices.

Why Join Us?

• Lead a pioneering practice at the intersection of cybersecurity, compliance, and software engineering.
• Work on high‑impact projects across industries and platforms.
• Collaborate with a world‑class team across AI, Edge, Cloud, and IoT domains.
• Be part of a mission to build resilient, compliant, and trustworthy digital systems.