Zaptec is looking for an Cyber Security Lead for Devices!

Zaptec Charger AS; Sandnes; Hybrid; NOK 1,000,000 - 1,300,000; Full time

Benefits offered by this job

Insurance and pension schemes

Hardware provided

Yearly bonus scheme

Job summary

Zaptec Charger AS is seeking a Cyber Security Lead for Devices to shape security decisions in our embedded EV charger products. You will own risk assessments, vulnerability management, and compliance evidence while collaborating with embedded hardware and software teams.

This senior, individual-contributor role offers ownership of device security strategy, secure boot enhancements, cryptography and update verification across our connected chargers, with Stavanger as the preferred location and

Qualifications

• Experience with cyber security for connected devices, embedded systems, or industrial products.
• For security-development practices, threat modelling and security requirements.
• Knowledge of secure boot, cryptography, key management, secure storage, and signed firmware updates.
• Embedded technologies: embedded Linux, C/C++, RTOS or networking.
• Degree in cyber security, computer science, or related field.
• Professional working proficiency in English.

Responsibilities

• Run threat-modelling and security-requirement sessions to identify risks early in product development.
• Review device architecture, designs and security-sensitive implementations, guiding teams to improvements.
• Strengthen secure boot, device identities, cryptography, and secure storage.
• Define risk assessments, vulnerability-management processes, and security documentation.
• Coordinate security testing and risk-based decisions.

Skills

Cyber security

Threat modelling

Secure development

Embedded Linux

Education

Bachelor's degree in cyber security or related field

Tools

C/C++

Embedded Linux

RTOS

Security testing tools

Job description

Senior role shaping technical decisions, strengthening security development practices, and managing device security for connected EV chargers.

• Experience with cyber security for connected devices, embedded systems, or industrial products
• Understanding of threat modelling, security requirements, and secure-development practices
• Knowledge of secure boot, cryptography, key management, secure storage, and signed firmware updates
• Understanding of embedded technologies like embedded Linux, C/C++, RTOS, or networking
• Degree in cyber security, computer science, or equivalent practical experience
• Hardware and Zaptec gear provided
• Insurance and pension schemes
• Yearly bonus scheme

Zaptec is looking for an Cyber Security Lead for Devices!

More than 750,000 of our chargers are installed across Europe. They are physical, internet-connected products that receive automatic over-the-air updates. That means the security decisions we make affect products already running in customers’ homes and businesses.

As our products and the expectations around connected-device security continue to grow, we’re looking to strengthen how security is built into the products we develop and maintain.

This is a senior individual-contributor role within our Embedded Software department, where you’ll work closely with the teams building our connected devices and the software that runs on them. You’ll shape technical decisions, strengthen our security development practices and help turn security risks and requirements into practical engineering decisions.

You’ll also take ownership of the structure and evidence behind our device security, from risk assessments and vulnerability management to compliance documentation. You won’t be solely responsible for device security, security is something we build together, but you will be the person staying closest to the area, identifying what needs attention and making sure the right people have the insight they need to act.

Stavanger is our preferred location, but we’re open to discussing remote arrangements with experienced candidates. We’ll find a way of working that makes sense together.

You’ll spend time on things like:

Run threat-modelling and security-requirement sessions to identify meaningful risks early in product development.

Review device architecture, designs and security-sensitive implementations, and guide teams towards practical improvements.

Strengthen areas such as secure boot, device identities, cryptography, secure storage, firmware signing, update verification and rollback protection.

Define and maintain risk assessments, vulnerability-management processes, compliance documentation and the security evidence needed across our products.

Guide teams through security trade-offs and help translate risks and requirements into practical engineering decisions.

Coordinate security testing and help build confidence in our products before they reach customers.

Collaborate across cyber security, cloud and the wider organisation while staying close to the embedded developers building our devices.

A key part of your role will be helping Zaptec answer not only “are we compliant?”, but “are our devices secure, and can we demonstrate it?” You’ll create the structure, technical understanding and visibility that help the right people make informed security decisions.

Is this you?

You have experience with cyber security for connected devices, embedded systems, industrial products, or a closely related area. You understand that securing a device means working with hardware, firmware, software, identities, update paths, and the people who build and operate them.

You are comfortable moving between technical engineering and structured security work. You can review a design, ask difficult questions, identify what matters and help a team turn the answer into practical work.

Your experience may come from connected devices, industrial systems, automotive, energy, telecommunications, or another environment where security has to work in a real product.

You do not need to be an expert in every area below. We expect substantial experience in several of them, and you’ll have the opportunity to develop across the rest.

Some personal skills we value

Structured and thorough, with the follow-through needed to turn findings into action.

Pragmatic, with an ability to make security work in the context of real products and delivery constraints.

A clear and confident communicator in technical discussions and written work.

Curious and comfortable going deep into unfamiliar technical problems.

Able to build trust and influence decisions across teams without relying on formal authority.

As for the skills required for this job

Experience with cyber security for connected devices, embedded systems, industrial products, or a closely related area.

Understanding of threat modelling, security requirements and secure-development practices.

Hands‑on experience with several device‑security areas, such as secure boot and chain of trust, cryptography and key management, secure storage and hardware roots of trust, device identity and credentials, signed firmware updates and rollback protection, embedded networking and protocol security, vulnerability management, or security testing.

Enough embedded‑technology understanding to work credibly with firmware and hardware teams. This may include embedded Linux, C/C++, RTOS, networking, or hardware‑adjacent software.

A degree in cyber security, information security, computer science, computer engineering, embedded systems, or a related field, or equivalent practical experience.

Professional working proficiency in English, both written and spoken.

It would be a bonus if you have

Experience with the Cyber Resilience Act, EN 18031, IEC 62443, or similar product‑security standards.

Experience with hardware security modules, secure elements, TPMs, or other hardware roots of trust.

Experience with security testing, penetration testing, vulnerability research, or security assessments.

Experience with EV charging, energy, or other regulated connected products.

If you have a strong foundation in device security and enjoy working through difficult engineering problems with the teams building the product, we’d like to talk. You don’t need to tick every box to be a great fit for this role.

We trust you do your job, flex your own day

We'll provide the hardware you need

Pick your favourite Zaptec gear - it’s on us.

We got your back in regards to insurance and pensions

Take part in our yearly bonus scheme

Don't forget social events

• C++ (Programming language)
• Embedded Linux
• Embedded Systems
• Kryptografi

We combine the latest tech with human-centered design to offer highly intuitive and efficient EV chargers that ensure easier access to personal electric transport.

This gives people the freedom and potential to travel into a more sustainable future. How neat is that?

Within just a few years, we’ve built our domestic market-leading position by supplying superior charging installations for housing co-ops and private homes alike.

As a Norwegian EV pioneer, our goals are aimed at bringing the best charging technology to the rest of the world. Are you up for this challenge?

Cyber Security, Cyber, cybersecurity, network administration, penetration testing