Software Security Designer – Cyber Resilience Act / IEC

Sioux; Eindhoven; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Flexible 32-40 hour week

Work from home option

28 + 12 holidays

Training budget €6000/year

Sioux Campus & Tech Labs

Job summary

Sioux Technologies is seeking a Software Security Designer – Cyber Resilience Act / IEC to help deliver cyber-resilient software for high-tech products. You will translate security requirements into practical software, work in mono- and multi-disciplinary teams, and ensure regulatory compliance.

Join us in developing CRA and IEC 62443 compliant software across semiconductor, medical, analytical instrumentation, and industrial automation domains.

Qualifications

• Bachelor's or Master's degree in Computer Science, Embedded Systems, or related field.
• 7+ years in software development (C++, C#, Java, or embedded) in medical, semiconductor, analytical instrumentation, or industrial automation industries.
• Experience implementing security requirements for CRA, NIS2, and AIA.
• Familiarity with IEC 62443, IEC 81001, and ISO/IEC 27001.
• Experience with SBOMs and securing the software supply chain.
• Experience with secure coding guidelines (CERT, MISRA, OWASP) and Agile/DevOps/DevSecOps.

Responsibilities

• Translate cybersecurity requirements into practical software solutions.
• Perform software security design reviews and secure-by-design implementation.
• Support threat modelling (STRIDE, OWASP, attack trees, misuse cases).
• Perform cybersecurity risk assessments and define security requirements for embedded and application software.
• Implement authentication, authorization, encryption and secure communication.
• Improve software supply chain security (SBOMs, dependency management, vulnerability management).
• Develop CRA and IEC 62443 compliant software.

Skills

Secure product development

Threat modelling

Software design reviews

Secure-by-design principles

Education

CS/Embedded degree

Tools

CERT guidelines

MISRA

OWASP

Job description

At Sioux Technologies, cybersecurity is rapidly becoming a core engineering discipline. Rather than treating security as an afterthought, we help our customers design cyber-resilient products from the earliest system concepts onward.

In this role you help our customers develop cyber-resilient high-tech products that comply with the latest European cybersecurity legislation and industrial security standards.

You work on complex systems in the semiconductor, medical, analytical instrumentation and industrial automation domains, translating cybersecurity requirements into practical software solutions.

What function?

In this role you help our customers develop cyber-resilient high-tech products that comply with the latest European cybersecurity legislation and industrial security standards.

You work on complex systems in the semiconductor, medical, analytical instrumentation and industrial automation domains, translating cybersecurity requirements into practical software solutions.

What excites you as a Software Security Designer – Cyber Resilience Act / IEC?

From any Sioux office in the Netherlands, you will work in mono-disciplinary and multidisciplinary teams to design, implement and validate secure software that meets regulatory requirements and industry-standard security frameworks.

You enjoy:

• Translating a security architecture into software design
• Performing software security design reviews and implementing secure-by-design principles.
• Supporting threat modelling (STRIDE, OWASP, attack trees, misuse cases).
• Performing cybersecurity risk assessments and defining security requirements for embedded and application software.
• Implementing authentication, authorization, encryption and secure communication.
• Improving software supply chain security (SBOMs, dependency management, vulnerability management).
• Developing CRA and IEC 62443 compliant software.

Sounds good so far? We’d love to tell you more…..

This is what you bring to the table

You combine extensive software engineering experience with deep knowledge of secure product development, helping customers implement security throughout the entire software lifecycle.

To be successful in this role, you have:

• A Bachelor's or Master's degree in Computer Science, Embedded Systems, or a related technical field.
• More than 7 years of experience in software development (C++, C#, Java, and/or embedded software) within the medical technology, semiconductor, analytical instrumentation, and/or industrial automation industries.
• Demonstrable experience in implementing security requirements for products subject to one or more of the following regulations: CRA, NIS2, and AIA.
• Experience with one or more of the following security standards: IEC 62443, IEC 81001, and ISO/IEC 27001.
• Experience with threat modeling and vulnerability management (CVE, CVSS, PSIRT).
• Experience generating Software Bills of Materials (SBOMs) and securing the software supply chain.
• Experience with secure coding guidelines (such as CERT, MISRA, and OWASP) and working in Agile, DevOps, and DevSecOps environments.

This is what you can expect in return from Sioux

• Flexible 32-40 hour working week, with room to work from home.
• A healthy work-life balance is very important to us. We have 28 holidays with an option to acquire an additional 12 holidays.
• You will work with passionate colleagues who share your drive for technology and business success.
• By combining our expertise in software, electronics, mechanics, mechatronics, mathematics and assembly, we make the impossible possible for our customers and get to work on challenging high-tech projects.
• You get a lot of freedom and responsibility; after all, you know exactly what you are doing.Personal coaching and a training budget of €6000 per year, so that you can continue to develop yourself.
• We also find it important to have fun together. We organize a lot for our employees, from family festivals and sparkling Christmas parties, to inspiring knowledge sessions for the high-tech community.
• You will be working at a prime location in the heart of the Brainport region. You will be working on the Sioux Campus and can use our Sioux Labs living room every day for lunch, sports, making music, and sharing your knowledge with colleagues in one of our Tech Labs.

High Tech & High Fun

We can tell you all about the typical Sioux-culture and the high-tech challenging projects. About how you can develop yourself, like nowhere else. But we’d rather have you hear it from our own employees.

Export control

This position requires access to controlled technology, as defined in the US Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require Sioux to proceed with candidates who are immediately eligible to access controlled technology.