Cybersecruity Engineer - Embedded, Robotics (human)

NEURA Robotics; Germany (OH); On-site; USD 120,000 - 150,000; Full time

Job summary

NEURA Robotics is seeking an experienced embedded cybersecurity engineer to secure our robotic platforms across embedded controllers and edge compute nodes. You will design secure boot chains, threat models, and SBOM management, and collaborate with hardware, software, safety and cloud teams to ensure certification readiness.

A MSc in a related field and 3+ years of product/embedded cybersecurity experience are required, with IEC 62443, ISO 21434 familiarity preferred.

Qualifications

• 3+ years in product/embedded cybersecurity engineering and involvement in at least one product launch to certification or market release.
• Deep IEC 62443 (4-1/4-2) expertise with familiarity of ISO/SAE 21434 and EU Cyber Resilience Act.
• Experience with threat modeling, penetration testing, SBOM management and secure update processes.

Responsibilities

• Own cybersecurity engineering for embedded robotic platforms from design to verification.
• Perform threat modeling, secure architecture, and implement security controls (secure boot, TPM/HSM, signed firmware).
• Align with IEC 62443-4-1/4-2 and manage SBOMs, vulnerabilities, and updates.
• Harden RTOS environments (FreeRTOS, Zephyr, ROS 2/SROS2) and secure industrial protocols.
• Collaborate with hardware, software, safety, certification, and cloud teams to ensure end-to-end security.
• Translate regulatory requirements into actionable engineering guidance and support audits.

Skills

Cybersecurity engineering

Threat modeling

Embedded systems

RTOS / Embedded Linux

Secure boot / TPM/HSM

SBOM management

Secure communication protocols

Education

MSc in Computer Science / Electrical Engineering / Embedded Systems

Certifications like IEC 62443 / OSCP

Tools

Yocto

FreeRTOS

Zephyr

ROS 2 / SROS2

TLS / X.509

EtherCAT / PROFINET / OPC UA

Job description

At the heart of product innovation and development, our Systems Engineering Department transforms market demands into safe, certifiable, and competitive solutions and architectures. By collaborating closely with software, hardware, safety, and certification teams, we ensure every product meets the highest standards while adapting to fast‑evolving market needs. Our mission is to enable seamless human‑robot collaboration and deliver solutions that are safe, compliant, and ready for the future. Join us to shape the next generation of human‑robot systems by owning system‑level requirements, integration, and alignment, with architectural responsibilities as needed. If you thrive in cross‑functional teamwork and technical excellence, you’ll find extraordinary opportunities with us.

Your Mission & Challenges

• Secure the Product: Own cybersecurity engineering for embedded robotic platforms, from secure architecture design and threat modeling (TARA, STRIDE) to implementation of security controls (secure boot, TPM/HSM‑based hardware‑backed identities, secure key storage, signed firmware updates), and through to verification and penetration testing.

• Drive Compliance by Design: Establish and execute a secure development lifecycle aligned with IEC 62443‑4‑1 and EU Cyber Resilience Act requirements. Ensure component‑level compliance per IEC 62443‑4‑2, including SBOM management (e.g. CycloneDX SBOM), vulnerability handling, and security update processes.

• Secure robotics: Harden RTOS environments (e.g. FreeRTOS, Zephyr, ROS 2/SROS2) and secure industrial protocols—EtherCAT, PROFINET, OPC UA, ROS 2 DDS—covering authentication, integrity, and availability.

• Embed in Engineering: Work hands‑on with robotics HW, SW, and systems engineering teams to derive, allocate, and validate cybersecurity requirements across embedded controllers, sensor interfaces, communication stacks, and edge compute nodes and also contribute to our security software stack for device certificate, secure communication and OTA update process.

• Bridge to Cloud Security: Define and enforce the cybersecurity boundary between embedded/edge systems and cloud‑connected services. Align threat models, trust boundaries, and security controls with the cloud cybersecurity team to ensure end‑to‑end integrity across the full system architecture.

• Shape the Security Posture: Monitor the evolving regulatory landscape (EU Machinery Regulation, Cyber Resilience Act, UNECE R155, ISO/SAE 21434) and translate new requirements into actionable engineering guidance. Drive vulnerability disclosure, incident response readiness, and cross‑project lessons learned.

What We Can Look Forward To

• Education: MSc in Computer Science, Electrical Engineering, Embedded Systems, IT Security, or related field. ISA/IEC 62443 certification, OSCP, or equivalent strongly preferred.

• Track Record: 3+ years in product/embedded cybersecurity engineering with demonstrable involvement in at least one product launch through to certification or market release. Proven ability to operate at the boundary between security engineering and embedded systems development.

• Standards Mastery: Deep expertise in IEC 62443 (especially 4‑1 and 4‑2). Working familiarity with ISO/SAE 21434, UNECE R155, EU Cyber Resilience Act, and NIST CSF. Understanding of how embedded cybersecurity intersects with functional safety (IEC 61508, ISO 13849).

• Technical Depth: Hands‑on experience with secure boot chains, hardware security modules (HSM/TPM), cryptographic protocols (TLS, X.509), embedded Linux (Yocto) or RTOS environments, and firmware security. Proficient in threat modeling, penetration testing, and SBOM‑based vulnerability management.

• Collaboration & Communication: Able to work embedded within robotics engineering teams while interfacing effectively with cloud/IT security, certification, and external auditors. Strong ability to translate cybersecurity requirements into actionable engineering constraints.