Senior Product Cybersecurity Engineer – Embedded Systems

Adavo; Stockholms kommun; Hybrid; SEK 700,000 - 900,000; Full time

Job summary

Adavo is seeking an experienced Product Cybersecurity Engineer for a consulting assignment near Stockholm. The role focuses on cybersecurity within embedded and software-based products across the full development lifecycle, working with developers and verification teams.

The candidate will perform threat modelling, security assessments, vulnerability management, and testing, ensuring compliance with cybersecurity processes and collaborating with global stakeholders.

Qualifications

• Experience in product cybersecurity for embedded/industrial contexts.
• Experience with RTOS and embedded software.
• Familiarity with threat modelling and vulnerability management.
• Ability to communicate cybersecurity topics to stakeholders.
• Experience with security testing and penetration testing.

Responsibilities

• Drive product cybersecurity activities across the development lifecycle.
• Perform threat modelling, security assessments, and risk analysis.
• Support developers with cybersecurity requirements and secure practices.
• Manage vulnerability tracking and remediation.
• Conduct or support penetration and security testing on embedded/software products.
• Ensure adherence to internal cybersecurity processes.

Skills

Product cybersecurity

Embedded cybersecurity

Threat modelling

Vulnerability management

Security testing

Penetration testing

Secure SDLC

Tools

Achilles

VxWorks

Penetration testing tools

Job description

• Secure product development

Location

Near Stockholm, Sweden – Hybrid

Start

As soon as possible, preferably no later than beginning of October 2026

Language

Swedish and English

Assignment type

Consulting assignment

About The Assignment

We are looking for an experienced Product Cybersecurity Engineer for an assignment within a global industrial organization located near Stockholm.

The focus is on cybersecurity within embedded and software-based products, covering the complete development lifecycle – from threat modelling and security requirements to vulnerability management, testing and penetration testing.

You will work closely with software developers, system testers and verification engineers while also collaborating with global cybersecurity stakeholders.

The role combines hands‑on technical cybersecurity work with responsibility for ensuring that products and development projects comply with established cybersecurity processes and requirements. The role is not an IT infrastructure role.

Key Responsibilities

• Drive and support product cybersecurity activities throughout the development lifecycle.
• Perform and contribute to threat modelling, security assessments and risk analysis.
• Support development teams with cybersecurity requirements and secure development practices.
• Work with vulnerability management, including identification, assessment, tracking and remediation.
• Perform or support penetration testing and security testing of embedded and software‑based products.
• Work with cybersecurity tools and vulnerability tracking solutions.
• Ensure development projects follow established internal cybersecurity processes.
• Communicate cybersecurity status, risks and requirements to local and global stakeholders.
• Contribute to the continuous improvement of cybersecurity processes and ways of working at a global level.
• Collaborate closely with software development, system testing and verification teams.

Technical Environment

• Embedded systems / bare-metal products
• Real‑Time Operating Systems (RTOS)
• VxWorks
• Legacy embedded operating systems
• Windows‑based software environments
• Vulnerability management and vulnerability tracking
• Penetration and robustness testing tools, including Achilles
• Threat modelling
• Secure product development
• Cybersecurity testing and verification

Your Background

We believe you have solid experience within product cybersecurity, preferably from embedded, industrial, automotive, telecom, defence, energy or similar product‑development environments.

Relevant experience includes:

• Product cybersecurity / embedded cybersecurity
• Embedded software and RTOS environments
• Cybersecurity within software or product development
• Threat modelling
• Vulnerability management
• Security testing and penetration testing
• Secure Development Lifecycle / cybersecurity development processes
• Working closely with development and verification teams
• Communicating technical cybersecurity topics to different stakeholders

Experience with VxWorks, bare‑metal systems, Achilles or similar security‑testing tools is highly advantageous.

Previous experience with system testing, product testing or verification is also considered a strong advantage.

Practical Information

The assignment is based near Stockholm. The current setup is flexible and needs‑driven, but the long‑term expectation is approximately three days per week on‑site, depending on project activities.

You must therefore be able to work regularly on‑site in the Stockholm area.

Required languages: Swedish and English

Preferred start: No later than beginning of October 2026