Cyber Security Lead for Devices

Zaptec AS; Stavanger; Hybrid; NOK 900,000 - 1,300,000; Full time

Benefits offered by this job

We provide hardware needed for your工作

Career growth & competence development

Pick your Zaptec gear – on us

Insurance and pensions

Yearly bonus scheme

Social events

Job summary

Zaptec AS in Stavanger leads EV charging security and embeds security into connected devices across Europe. This senior role shapes risk assessments, threat modelling and practical engineering decisions for our products.

You will own the structure and evidence of device security, coordinate testing and collaborate across cyber security, cloud and embedded teams to ensure demonstrable security before market release.

Qualifications

• Experience with cyber security for connected devices or closely related areas.
• Understanding of threat modelling, security requirements and secure-development practices.
• Hands-on experience across device-security areas (secure boot, chain of trust, cryptography, key management, secure storage, hardware roots of trust, device identity, credentials, signed firmware updates and rollback protection, embedded networking and protocol security, vulnerability management, or security testing).
• Sufficient embedded-technology understanding to work credibly with firmware and hardware teams (embedded Linux, C/C++, RTOS, networking, or related).
• Professional working proficiency in English, both written and spoken.

Responsibilities

• Run threat-modelling and security-requirement sessions early in product development.
• Review device architecture, designs and security-sensitive implementations; guide teams to improvements.
• Strengthen secure boot, device identities, cryptography, secure storage, firmware signing, update verification and rollback protection.
• Define and maintain risk assessments, vulnerability-management processes and security evidence across products.
• Guide teams through security trade-offs and translate risks into practical engineering decisions.
• Coordinate security testing and build confidence before products reach customers.
• Collaborate across cyber security, cloud and embedded developers while staying close to devices.

Skills

Cyber security for connected devices

Embedded systems

Threat modelling

Security requirements

Secure development practices

Secure boot

Chain of trust

Cryptography

Key management

Secure storage

Hardware roots of trust

Device identity & credentials

Firmware updates & rollback protection

Embedded networking & protocol

Vulnerability management

Security testing

Embedded Linux / RTOS / C/C++

English proficiency

Education

Degree in cyber security / information security / CS / CE

Tools

Embedded Linux

C/C++

Networking

Job description

Shape how security is built into connected products used across Europe.

We combine the latest tech with human-centered design to offer highly intuitive and efficient EV chargers that ensure easier access to personal electric transport.

This gives people the freedom and potential to travel into a more sustainable future. How neat is that?

Within just a few years, we’ve built our domestic market‑leading position by supplying superior charging installations for housing co‑ops and private homes alike.

As a Norwegian EV pioneer, our goals are aimed at bringing the best charging technology to the rest of the world. Are you up for this challenge?

More than 750,000 of our chargers are installed across Europe. They are physical, internet-connected products that receive automatic over-the-air updates. That means the security decisions we make affect products already running in customers’ homes and businesses.

As our products and the expectations around connected-device security continue to grow, we’re looking to strengthen how security is built into the products we develop and maintain.

This is a senior individual-contributor role within our Embedded Software department, where you’ll work closely with the teams building our connected devices and the software that runs on them. You’ll shape technical decisions, strengthen our security development practices and help turn security risks and requirements into practical engineering decisions.

You’ll also take ownership of the structure and evidence behind our device security, from risk assessments and vulnerability management to compliance documentation. You won’t be solely responsible for device security, security is something we build together, but you will be the person staying closest to the area, identifying what needs attention and making sure the right people have the insight they need to act.

Stavanger is our preferred location, but we’re open to discussing remote arrangements with experienced candidates. We’ll find a way of working that makes sense together.

You’ll spend time on things like:

• Run threat-modelling and security-requirement sessions to identify meaningful risks early in product development.

• Review device architecture, designs and security-sensitive implementations, and guide teams towards practical improvements.

• Strengthen areas such as secure boot, device identities, cryptography, secure storage, firmware signing, update verification and rollback protection.

• Define and maintain risk assessments, vulnerability-management processes, compliance documentation and the security evidence needed across our products.

• Guide teams through security trade-offs and help translate risks and requirements into practical engineering decisions.

• Coordinate security testing and help build confidence in our products before they reach customers.

• Collaborate across cyber security, cloud and the wider organisation while staying close to the embedded developers building our devices.

• A key part of your role will be helping Zaptec answer not only “are we compliant?”, but “are our devices secure, and can we demonstrate it?” You’ll create the structure, technical understanding and visibility that help the right people make informed security decisions.

You have experience with cyber security for connected devices, embedded systems, industrial products, or a closely related area. You understand that securing a device means working with hardware, firmware, software, identities, update paths, and the people who build and operate them.

You are comfortable moving between technical engineering and structured security work. You can review a design, ask difficult questions, identify what matters and help a team turn the answer into practical work.

Your experience may come from connected devices, industrial systems, automotive, energy, telecommunications, or another environment where security has to work in a real product.

You do not need to be an expert in every area below. We expect substantial experience in several of them, and you’ll have the opportunity to develop across the rest.

Some personal skills we value

• Structured and thorough, with the follow-through needed to turn findings into action.

• Pragmatic, with an ability to make security work in the context of real products and delivery constraints.

• A clear and confident communicator in technical discussions and written work.

• Curious and comfortable going deep into unfamiliar technical problems.

• Able to build trust and influence decisions across teams without relying on formal authority.

As for the skills required for this job

• Experience with cyber security for connected devices, embedded systems, industrial products, or a closely related area.

• Understanding of threat modelling, security requirements and secure-development practices.

• Hands‑on experience with several device‑security areas, such as secure boot and chain of trust, cryptography and key management, secure storage and hardware roots of trust, device identity and credentials, signed firmware updates and rollback protection, embedded networking and protocol security, vulnerability management, or security testing.

• Enough embedded‑technology understanding to work credibly with firmware and hardware teams. This may include embedded Linux, C/C++, RTOS, networking, or hardware‑adjacent software.

• A degree in cyber security, information security, computer science, computer engineering, embedded systems, or a related field, or equivalent practical experience.

• Professional working proficiency in English, both written and spoken.

It would be a bonus if you have

• Experience with the Cyber Resilience Act, EN 18031, IEC 62443, or similar product‑security standards.

• Experience with hardware security modules, secure elements, TPMs, or other hardware roots of trust.

• Experience with security testing, penetration testing, vulnerability research, or security assessments.

• Experience with EV charging, energy, or other regulated connected products.

If you have a strong foundation in device security and enjoy working through difficult engineering problems with the teams building the product, we’d like to talk. You don’t need to tick every box to be a great fit for this role.

Join in! Yes, we do spend a lot of time in front of our desks, but we also love coffee, conversations, nerdy talks, lunches and jokes.

• We trust you do your job, flex your own day
• We'll provide the hardware you need
• Career growth & competence development
• Pick your favourite Zaptec gear - it’s on us.
• We got your back in regards to insurance and pensions
• Take part in our yearly bonus scheme
• Don't forget social events

We strive to be the best at what we do, both in the eyes of our customers and our coworkers. We believe in a flexible and trustworthy way of working. We focus on results, not necessarily the approach because we respect that each coworker has unique ways of working to reach the target.

Customer experience is the core of everything we do to provide a worry‑free EV life.

We believe in our employees' uniqueness and the multidisciplinary way of working, and we work collaboratively toward a common goal.

Zaptec's products and services are making a difference to EV drivers, as we provide EV owners the freedom to charge from home and explore new adventures. By joining our team, you are joining us in our mission to create a more sustainable and electrical future, providing user-oriented EV charging experiences.

Surround yourself with highly motivated fellow Zapiens who support one another to reach our common goal. At Zaptec, you will impact improving the EV journey globally.

We don't care about your background, gender identity, sexual orientation, religious beliefs or age. We do care about equal respect. We're just humans. And sometimes we fuck up.