Product Security Architect

HBK - Hottinger Brüel & Kjær; Chennai District; On-site; INR 3,000,000 - 5,400,000; Full time

Job summary

HBK - Hottinger Brüel & Kjær is seeking a Security Architect to lead security architecture across web, desktop, SaaS, cloud, embedded and firmware products. You will champion secure-by-design across the lifecycle and mentor engineering teams on best practices.

You will guide threat modelling (STRIDE, TARA), perform risk analyses, review code and configurations, and help align with ISO 21434, IEC 62443, NIST and EU CRA requirements. Strong Linux/Android development experience preferred.

Qualifications

• Bachelor's or Master's degree in CS, Cyber Security or engineering.
• Proven experience in security architecture across multiple product types (web, desktop, SaaS, cloud, embedded, firmware).
• Deep technical understanding of security concepts (IAM, Secure Access, Secure Boot, Secure On board communication, Encryption, Secure Coding Practices).
• Hands-on Threat Modelling (STRIDE) and Risk Analysis (TARA).
• Familiarity with EU CRA, CSMS, UNECE R156/R157, ISO 21434, IEC 62443, ISO 27001 and NIST SP 800 series.
• Strong background in modern software development (C++, Java) on Linux/Android.
• Understanding of cryptographic fundamentals and secure hardware concepts.
• Strong expertise in System and SW Engineering; requirement-based development.
• Experience leading engineering teams and managing customer-facing projects.
• Excellent communication with engineering teams, customers, and stakeholders.

Responsibilities

• Consult and guide product teams in security analyses and threat modelling.
• Enable secure design by mentoring teams on architecture principles.
• Adapt development processes to include security tools (static analysis, fuzzing, testing frameworks).
• Drive security decisions to implement robust measures across products.
• Review code and configurations to identify vulnerabilities and train teams.
• Provide guidance on hardware security measures and SHMs.
• Ensure proper application of cryptographic techniques for data protection.
• Support compliance with ISO 21434, IEC 62443, NIST, EU CRA and related standards.
• Guide teams in implementing security controls to meet EU CRA compliance.

Skills

Security architecture

Threat modelling

Risk analysis

Vulnerability hunting

Secure coding practices

Cryptography

Hardware security

Team leadership

Customer collaboration

Education

Bachelor's or Master's in CS or Cyber Security

Tools

Static code analysis

Job description

Role Overview

As a Security Architect at HBK, you will lead security architecture initiatives across our diverse product portfolio, including web, desktop, SaaS, cloud, embedded, and firmware solutions. You will act as a trusted advisor and hands-on expert, ensuring secure-by-design principles are embedded throughout the product lifecycle. This role requires deep technical expertise in security concepts, threat modelling, risk assessment, and modern development practices.

Key Responsibilities

• Consult and Assist: Guide multiple product teams in creating risk analyses (e.g., TARA) and performing Threat Modelling using STRIDE or Product relevant methods
• Enable Secure Design: Guide and mentor teams on secure software architecture principles and best practices.
• Process Integration: Adapt software development processes to leverage modern security tools (e.g., Static Code Analysis, Fuzzing, Security Testing Frameworks).
• Drive Security Decisions: Influence project decisions to implement robust security measures across products.
• Code & Config Review: Actively review source code and configurations for vulnerabilities; train teams to prevent recurring issues.
• Hardware Security: Provide guidance on hardware security measures and Secure Hardware Modules (SHM).
• Cryptography: Ensure correct application of basic cryptographic techniques for data protection.
• Compliance Alignment: Support adherence to relevant standards such as ISO 21434 (Automotive), IEC 62443 (Industrial), NIST SP 800 , EU CRA and ISO 27001.
• Guide product teams in implementing security controls required to achieve EU CRA compliance

Qualifications

Education:

Bachelor's or Master's degree in computer sciences, Cyber Security or some other engineering degree.

Required Experience And Skills

• Proven experience in security architecture across multiple product types (web, desktop, SaaS, cloud, embedded, firmware).
• Deep technical understanding of security concepts (IAM, Secure Access, Secure Boot,Secure On board communication Encryption, Secure Coding Practices etc).
• Hands-on experience in Threat Modelling (STRIDE), Risk Analysis (TARA), Vulnerability hunting and source code reviews.
• Familiarity with one or more recognised security standards and regulations, such as EU CRA (Cyber Resilience Act), CSMS, UNECE R156/R157, ISO 21434 (Automotive), IEC 62443 (Industrial Control Systems), ISO 27001, and NIST SP 800 series
• Strong background in modern software development (C++, Java) on Linux/Android.
• Understanding of cryptographic fundamentals and secure hardware concepts.
• Strong expertise in both System and SW Engineering
• Expert in Requirement Engineering and requirement based development
• Proven experience in leading engineering teams and managing customer-facing projects
• Good understanding of different architectures, operating systems(Linux/QNX/Microsar), hardware & software security concepts, cryptography, debugging techniques
• Experience in interfacing with customer and review of customer requirements with a focus on cybersecurity impacts.
• Excellent communication skills to effectively engage with engineering teams, customers, and stakeholders.