Security Architect: Threat Modelling for Embedded & Cloud

NEURA Robotics; Germany (OH); On-site; USD 140,000 - 180,000; Full time

Job summary

NEURA Robotics is strengthening its cybersecurity team to guide product engineers and security specialists across our embedded, cloud, and IT domains. You will shape security architecture, lead threat modelling, and drive hands-on improvements to turn security into a competitive advantage.

The role spans embedded systems, cloud services, and enterprise IT, requiring clear communication with developers and executives alike. A background in cybersecurity across IT and product security is essential.

Qualifications

• 7+ years in cybersecurity across IT infrastructure and product/application security.
• Experience with threat modelling methodologies like STRIDE or PASTA.
• Hands-on with DevSecOps tooling: SAST/DAST, secrets scanning, SCA, and CI/CD integration.
• Experience designing or assessing cloud security on AWS/Azure/GCP.
• Strong understanding of embedded and IoT security principles (secure boot, OTA update, hardware trust).
• Familiarity with regulatory frameworks: ISO 27001, IEC 62443, NIS2, EU Cyber Resilience Act.
• Ability to translate risk into business terms for leadership and engineers.
• Degree in CS/IT Security/Electrical Engineering or equivalent; CISSP/CISM a strong plus.

Responsibilities

• Shape and evolve security architecture across IT and product, reviewing designs and driving improvements.
• Develop and maintain reference architectures for high-risk areas including OTA pipelines, Zero Trust, cloud security, and IAM.
• Lead threat modelling for major initiatives and produce prioritised risk maps.
• Own and maintain the security risk register and translate findings for leadership.
• Establish security standards and drive adoption without adding friction for developers.
• Integrate security into the development lifecycle with SAST/DAST, secrets scanning, and dependency checks.
• Own vulnerability management and remediation SLAs across product and IT operations.
• Map landscape to regulatory requirements and close gaps proactively.
• Define security bar for third-party components and supplier integrations.
• Scope external penetration tests and ensure remediation, not just acknowledgement.
• Shape the hiring profiles and onboarding for future Product Security Engineers.
• Serve as a bridge between security and engineering, translating risk for all stakeholders.

Skills

Threat modelling

DevSecOps tooling

Cloud security

Embedded & IoT security

Regulatory standards

Technical communication

Education

Degree in CS/IT Security/Electrical Engineering or equivalent

Tools

SAST

DAST

Secrets scanning

CI/CD tooling

Job description

NEURA Robotics is strengthening its cybersecurity team to guide product engineers and security specialists across our embedded, cloud, and IT domains. You will shape security architecture, lead threat modelling, and drive hands-on improvements to turn security into a competitive advantage.

The role spans embedded systems, cloud services, and enterprise IT, requiring clear communication with developers and executives alike. A background in cybersecurity across IT and product security is essential.