Product Security Specialist

Generative Bionics S.r.l.; Genova; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Competitive compensation

Career development

Cutting-edge robotics projects

Collaborative environment

Job summary

Generative Bionics S.r.l. in Genova, Italy seeks a Product Security Engineer to strengthen cybersecurity across hardware, software, embedded, AI, and cloud-connected products.

You will drive threat modeling, risk assessments, and secure development practices in collaboration with engineering, product, quality, and compliance teams. You will help ensure secure product design, validation, and post-market activities while supporting regulatory alignment with CRAs, EU AI Act, and IEC 62443, among

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, CS, Software/Computer Engineering, Robotics or related field.
• Minimum 3 years in Product Security, Application Security, Embedded Security, or related roles.
• Familiarity with SDLC, threat modeling, risk assessments, and security architecture reviews.
• Knowledge of OWASP Top 10/ASVS, secure coding practices, and SBOM concepts.
• Experience with security in robotics, AI, embedded systems, and cloud-connected products.

Responsibilities

• Define and maintain product cybersecurity requirements across the lifecycle.
• Perform threat modeling, attack surface analysis, and risk assessments.
• Collaborate with engineering to embed security-by-design in hardware, software, and AI.
• Coordinate vulnerability management, testing, and security validation activities.
• Contribute to SBOM processes and third-party component security reviews.
• Support compliance with CRA, EU AI Act, IEC 62443 and related standards.

Skills

Threat modeling

Vulnerability management

Security-by-design

SDLC security

DevSecOps

Security architecture

Communication skills

English proficiency

Education

Bachelor’s or Master’s degree in Cybersecurity/CS/Engineering

Tools

SBOM tooling

Linux security

Job description

About Us

Generative Bionics is a deep-tech company building humanoid robot platforms to deploy human-centered Physical AI. We design intelligent, capable machines that work alongside people in real-world environments — developed in Genova, Italy.

Role

The Product Security Engineer will strength the security of our products and ensure that cybersecurity is embedded throughout the entire product lifecycle.The role will contribute to the development of secure products by integrating security-by-design principles into hardware, software, embedded systems, AI-enabled capabilities, cloud-connected services, and supporting platforms. Working closely with engineering, product management, quality, and technology teams, the successful candidate will help identify and mitigate cybersecurity risks before products reach customers and throughout their operational lifecycle.The Product Security Engineer will play a key role in secure product development, threat modeling, vulnerability management, security validation, and regulatory product cybersecurity activities, ensuring that security requirements are effectively integrated into product design, development, testing, release, and post-market activities.The role will also support compliance and product assurance initiatives by collaborating with Information Security GRC Specialists, ICT Security Engineers, and engineering teams to align product cybersecurity activities with applicable regulations, standards, and industry best practices.

Responsibilities

• Define, maintain, and promote product cybersecurity requirements throughout the product lifecycle;
• Support the adoption and continuous improvement of Secure Development Lifecycle (SDLC) practices across product development teams;
• Perform threat modeling, attack surface analysis, abuse case analysis, and product security risk assessments;
• Collaborate with engineering teams to integrate security-by-design principles into software, hardware, embedded, AI, cloud-connected, and robotics products;
• Review product architectures and technical designs to identify cybersecurity risks and recommend appropriate mitigations;
• Support secure coding initiatives and provide security guidance to development teams;
• Coordinate product security testing activities, including vulnerability assessments, security reviews, and penetration testing initiatives;
• Support vulnerability management activities, including identification, triage, tracking, remediation, and verification of product security vulnerabilities;
• Contribute to Software Bill of Materials (SBOM) processes and support third-party component security reviews;
• Assess security risks associated with open-source software, commercial software components, and external dependencies;
• Support and coordinated vulnerability handling activities;
• Contribute to post-market cybersecurity monitoring and product security incident investigations- Support the development and maintenance of product cybersecurity documentation, security requirements, risk assessments, and security evidence;;
• Collaborate with quality, safety, compliance, engineering, and product teams to ensure cybersecurity requirements are addressed consistently;
• Support compliance activities related to the Cyber Resilience Act (CRA), EU AI Act, IEC 62443, and other applicable product cybersecurity requirements;
• Stay informed about emerging threats, vulnerabilities, attack techniques, and product security best practices relevant to robotics, AI, embedded systems, and connected products;

Requirements

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, Electrical Engineering, Robotics, or a related technical discipline;
• Minimum 3 years of experience in Product Security, Application Security, Embedded Security, Security Engineering, IoT Security, Industrial Cybersecurity, or related technical cybersecurity roles;
• Strong understanding of Security-by-Design and Secure Development Lifecycle (SDLC) principles;
• Experience performing threat modeling, product risk assessments, and security architecture reviews;
• Knowledge of application security, secure coding principles, and common software vulnerabilities;
• Understanding of product cybersecurity concepts for connected devices, embedded systems, and cyber-physical products;
• Familiarity with vulnerability management processes and remediation tracking;
• Knowledge of OWASP Top 10, OWASP ASVS, and secure software development practices;
• Understanding of Linux security concepts and system hardening techniques;
• Familiarity with cloud-connected product architectures and associated cybersecurity risks;
• Understanding of authentication, authorization, cryptography, and secure communications principles;
• Knowledge of software supply-chain security concepts and third-party component risk management;
• Ability to analyze complex technical systems and identify security weaknesses;
• Strong analytical, organizational, and documentation skills;
• Strong communication skills and ability to collaborate effectively across engineering, product, quality, and business teams;
• Professional proficiency in English;
• High standards of integrity, accountability, confidentiality, and professional judgment;
• Availability to travel nationally and internationally is expected;
• Experience in robotics, autonomous systems, humanoid robotics, industrial automation, IoT, or cyber-physical systems;
• Experience with embedded Linux environments and secure firmware development;
• Experience securing AI-enabled products and machine learning systems;
• Experience with Software Bill of Materials (SBOM) generation and management;
• Familiarity with penetration testing methodologies and security validation techniques;
• Experience working within DevSecOps environments;
• Familiarity with industrial cybersecurity principles and IEC 62443;
• Certified Secure Software Lifecycle Professional (CSSLP);
• GIAC Defensible Security Architecture (GDSA);
• GIAC Response and Industrial Defense (GRID);
• Offensive Security certifications or equivalent;

We Offer

• The opportunity to help build one of Europe's most ambitious humanoid robotics companies;
• Work on cutting-edge technologies at the intersection of AI, robotics, software, electronics, and manufacturing;
• A collaborative, multidisciplinary, and fast-paced, high-growth innovation-driven environment;
• Direct exposure to strategic programs with tangible impact on product development and company growth;
• Concrete opportunities for professional development and career advancement;
• Competitive compensation aligned with experience;

Disclaimer

We are proud to be an Equal Opportunity Employer. We evaluate all qualified applicants solely on the basis of merit and business needs, without distinction or discrimination based on gender, race, color, ethnic or social origin, age, religion, sexual orientation, gender identity, disability, or any other characteristic protected by law.