Remote Product Security & Compliance Engineer

Nabu Casa; Philippines; Remote; PHP 3,717,000 - 5,576,000; Full time

Benefits offered by this job

Paid time off

Sick leave

Parental leave

Hardware budget

Smart home budget

Internet stipend

Personal project time

Support Home Assistant side projects

Job summary

Nabu Casa is hiring a Product Security & Compliance Engineer to safeguard our hardware and cloud services. This remote, full-time role blends hands-on security engineering with regulatory compliance across devices, firmware, networking, and cloud areas.

You’ll model threats, validate security, manage SBOMs, and ensure conformity evidence for standards like RED, EN 18031, and the Cyber Resilience Act. You’ll work with hardware, firmware, cloud, and product teams from early development, coordinate

Qualifications

• Hands-on security experience in embedded/firmware, network, application, or cloud security.
• Ability to create architecture or data-flow diagrams and perform threat modeling.
• Experience with security testing such as vulnerability scanning, SAST/DAST, SBOM tooling, firmware analysis, or pentesting.
• Experience with connected products, IoT, embedded systems, or hardware/software/cloud integrations.
• Ability to translate findings into structured risk assessments and compliance evidence.
• Knowledge of EN 18031, RED requirements, CRA, ETSI EN 303 645, IEC 62443 or similar standards.
• Strong written and verbal communication; fluent English.

Responsibilities

• Own cybersecurity aspects of regulatory compliance for connected hardware and cloud services.
• Prepare products for EU Cyber Resilience Act including vulnerability handling and incident reporting.
• Create and maintain architecture and data-flow diagrams for products and services.
• Perform threat modeling and translate risks into security requirements.
• Conduct hands-on security validation: vulnerability scans, SAST/DAST, firmware analysis, network exposure.
• Generate SBOMs and monitor software dependencies for known vulnerabilities.
• Validate security mechanisms: authentication, secure boot, signed updates.
• Translate assessments into conformity evidence and Declarations of Conformity.
• Collaborate with hardware, firmware, cloud, and product teams early in development.
• Coordinate with ODMs and certification bodies; manage internal cybersecurity evidence.
• Work with Open Home Foundation to align security documentation for open-source projects.
• Track conformity status, security support periods, and regulatory deadlines.
• Provide privacy-by-design input for changes to cloud services.

Skills

Embedded security

Network security

Application security

Cloud security

Threat modeling

Architecture diagrams

SBOM tooling

Vulnerability testing

IoT expertise

Documentation

Tools

Vulnerability scanners

SBOM tooling

Firmware analysis

Penetration testing

CI/CD security

Job description

Nabu Casa is hiring a Product Security & Compliance Engineer to safeguard our hardware and cloud services. This remote, full-time role blends hands-on security engineering with regulatory compliance across devices, firmware, networking, and cloud areas.

You’ll model threats, validate security, manage SBOMs, and ensure conformity evidence for standards like RED, EN 18031, and the Cyber Resilience Act. You’ll work with hardware, firmware, cloud, and product teams from early development, coordinate