Software Security Designer – Cyber Resilience Act / IEC

Sioux Technologies; Eindhoven; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Flexible 32-40 hour week

Training budget €6000 per year

Holiday leave + extra holidays

Brainport Campus facilities

Job summary

Sioux Technologies, in the Netherlands, is seeking a Software Security Designer to translate cybersecurity requirements into practical software for high‑tech products in medical, semiconductor, analytical instrumentation and automation domains.

You will design, implement and validate secure software, perform threat modelling and risk assessments, and ensure compliance with CRA, NIS2, AIA, and ISO/IEC 27001. A flexible 32-40 hour week and training budget support growth.

Qualifications

• Bachelor's or Master's degree in Computer Science, Embedded Systems, or a related technical field.
• 7+ years of software development experience in medical technology, semiconductor or automation industries.
• Experience implementing security requirements for CRA, NIS2, and AIA.
• Familiarity with IEC 62443, IEC 81001 or ISO/IEC 27001.
• Experience with threat modelling and SBOMs & secure supply chain.
• Proficiency in secure coding guidelines (CERT, MISRA, OWASP) and DevSecOps.

Responsibilities

• Translate cybersecurity requirements into practical software designs.
• Design, implement and validate secure software across embedded and application layers.
• Perform security design reviews and threat modelling (STRIDE, attack trees).
• Conduct cybersecurity risk assessments and define security requirements.
• Implement authentication, authorization, encryption and secure communications.
• Improve software supply chain security and SBOM management.

Skills

Software security design

Threat modelling

Software architecture

Agile/DevOps

Education

Bachelor's or Master's in Computer Science or Embedded Systems

Tools

C++

C#

Java

Embedded software

SBOM tooling

Threat modelling tools

Job description

At Sioux Technologies, cybersecurity is rapidly becoming a core engineering discipline. Rather than treating security as an afterthought, we help our customers design cyber-resilient products from the earliest system concepts onward.

In this role you help our customers develop cyber-resilient high-tech products that comply with the latest European cybersecurity legislation and industrial security standards.

You work on complex systems in the semiconductor, medical, analytical instrumentation and industrial automation domains, translating cybersecurity requirements into practical software solutions.

What excites you as a Software Security Designer – Cyber Resilience Act / IEC?

From any Sioux office in the Netherlands, you will work in mono-disciplinary and multidisciplinary teams to design, implement and validate secure software that meets regulatory requirements and industry-standard security frameworks.

You enjoy:

• Translating a security architecture into software design
• Performing software security design reviews and implementing secure-by-design principles.
• Supporting threat modelling (STRIDE, OWASP, attack trees, misuse cases).
• Performing cybersecurity risk assessments and defining security requirements for embedded and application software.
• Implementing authentication, authorization, encryption and secure communication.
• Improving software supply chain security (SBOMs, dependency management, vulnerability management).
• Developing CRA and IEC 62443 compliant software.

Sounds good so far? We’d love to tell you more…..

Your future workplace

This is what you bring to the table

You combine extensive software engineering experience with deep knowledge of secure product development, helping customers implement security throughout the entire software lifecycle.

To be successful in this role, you have:

• A Bachelor's or Master's degree in Computer Science, Embedded Systems, or a related technical field.
• More than 7 years of experience in software development (C++, C#, Java, and/or embedded software) within the medical technology, semiconductor, analytical instrumentation, and/or industrial automation industries.
• Demonstrable experience in implementing security requirements for products subject to one or more of the following regulations: CRA, NIS2, and AIA.
• Experience with one or more of the following security standards: IEC 62443, IEC 81001, and ISO/IEC 27001.
• Experience with threat modeling and vulnerability management (CVE, CVSS, PSIRT).
• Experience generating Software Bills of Materials (SBOMs) and securing the software supply chain.
• Experience with secure coding guidelines (such as CERT, MISRA, and OWASP) and working in Agile, DevOps, and DevSecOps environments.

This is what you can expect in return from Sioux

• Flexible 32-40 hour working week, with room to work from home.
• A healthy work-life balance is very important to us. We have 28 holidays with an option to acquire an additional 12 holidays.
• You will work with passionate colleagues who share your drive for technology and business success.
• By combining our expertise in software, electronics, mechanics, mechatronics, mathematics and assembly, we make the impossible possible for our customers and get to work on challenging high-tech projects.
• You get a lot of freedom and responsibility; after all, you know exactly what you are doing.
• Personal coaching and a training budget of €6000 per year, so that you can continue to develop yourself.
• We also find it important to have fun together. We organize a lot for our employees, from family festivals and sparkling Christmas parties, to inspiring knowledge sessions for the high-tech community.
• You will be working at a prime location in the heart of the Brainport region. You will be working on the Sioux Campus and can use our Sioux Labs living room every day for lunch, sports, making music, and sharing your knowledge with colleagues in one of our Tech Labs.

High Tech & High Fun

We can tell you all about the typical Sioux-culture and the high-tech challenging projects. About how you can develop yourself, like nowhere else. But we’d rather have you hear it from our own employees.

Important note:

This position requires access to controlled technology, as defined in the US Export Administration Regulations (15 C.F.R.

• 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require Sioux to proceed with candidates who are immediately eligible to access controlled technology.