Security Architect

Key responsibilities

• Develop and refine product threat models using methodologies such as STRIDE, PASTA and Attack Trees.
• Conduct comprehensive security assessments for applications, UI software, Linux platforms, containerized environments, REST APIs, FPGA‑integrated systems, build/release pipelines and production documentation.
• Identify attack surfaces, trust boundaries and security gaps across standalone and integrated product ecosystems.
• Analyze product architectures against internal cybersecurity standards and industry best practices, including TPM, TEE, Secure Boot and hardware‑rooted trust mechanisms.
• Evaluate container architectures, Linux security controls and API security implementations.
• Assess product compliance with the EU Cyber Resilience Act, create Cryptographic Bill of Materials and recommend remediation strategies.
• Develop remediation action plans for UI/Application, Platform Software, Linux Engineering, FPGA Development, Build & Release and Manufacturing teams.
• Provide ongoing security consulting, design reviews and approve security improvements implemented by development teams.

Required skills

• Threat modeling (STRIDE, PASTA, Attack Trees)
• Application security and secure SDLC
• Product security architecture reviews
• API security, container security, Linux security
• Knowledge of TPM, TEE, Secure Boot and hardware‑rooted trust
• Familiarity with EU Cyber Resilience Act (CRA) and cryptographic bill of materials
• Experience with FPGA security and hardware security architecture