Remote Product Security & Compliance Engineer

Nabu Casa; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Remote work

Paid time off 25 days

Sick leave 14 days

Parental leave 6 weeks

Hardware budget

Smart home budget

Internet stipend 50%

Personal project time

Open-source project time

Job summary

Nabu Casa is seeking aProduct Security & Compliance Engineer to secure connected hardware and cloud services while aligning with regulatory requirements across EU standards. You will own threat modeling, vulnerability handling, SBOM maintenance, and conformity documentation.

You will work across devices, firmware, networking, and cloud services, partnering with engineering and compliance teams to embed security-by-design and maintain evidence for compliance and open-source collaboration.

Qualifications

• Strong hands-on security foundations across embedded, network, app or cloud domains.
• Experience creating architecture/data-flow diagrams and threat models for real products.
• Practical experience with security testing, vulnerability assessment and SBOM tooling.
• Experience translating security findings into compliance evidence and documentation.
• Knowledge of product cybersecurity standards/regulations (EN 18031, RED, CRA).

Responsibilities

• Own the cybersecurity aspects of regulatory compliance for connected hardware.
• Prepare products for EU Cyber Resilience Act, including vulnerability handling and SBOMs.
• Create and maintain architecture and data-flow diagrams for products and services.
• Perform threat modeling and translate risks into security requirements.
• Conduct hands-on security validation: SAST/DAST, firmware analysis, penetration testing.
• Maintain SBOMs and monitor dependencies for vulnerabilities.
• Validate security mechanisms like authentication and signed OTA updates.
• Translate assessments into conformity documents and Declarations of Conformity.
• Collaborate with hardware, firmware, cloud and product teams early in development.
• Coordinate with ODMs and external cert bodies; work with Open Home Foundation.

Skills

Embedded security

Network security

Application security

Cloud security

Threat modeling

Security testing

SBOM tooling

Vulnerability management

Compliance documentation

Open standards/ETSI EN 303 645

CI/CD security integration

Tools

SAST/DAST

SBOM tooling

Vulnerability scanners

Job description

Nabu Casa is seeking aProduct Security & Compliance Engineer to secure connected hardware and cloud services while aligning with regulatory requirements across EU standards. You will own threat modeling, vulnerability handling, SBOM maintenance, and conformity documentation.

You will work across devices, firmware, networking, and cloud services, partnering with engineering and compliance teams to embed security-by-design and maintain evidence for compliance and open-source collaboration.