Security Software Architect – Embedded Product Security

About the role

IsoSkills is seeking a Senior Security Software Architect to lead security assessments and guide the development of complex embedded products. The role involves close collaboration with development and architecture teams to embed robust security measures throughout the product lifecycle.

Key responsibilities

• Assess product security architecture, identify gaps and define practical improvements.
• Review embedded Linux, hardware/software interfaces, APIs, communication protocols, secure boot, TPM, certificates, device identity and access control.
• Perform threat modelling, security architecture reviews and evaluate CI/CD pipelines, dependencies and software supply‑chain security.
• Support development teams in implementing security enhancements and ensure compliance with cybersecurity standards and the EU Cyber Resilience Act.

Required profile

• Strong background in software/product security architecture, especially for embedded systems.
• Experience working directly with development and architecture teams on complex system designs.
• Understanding of hardware/software boundaries and embedded Linux environments.

Required skills

• Secure boot, TPM, cryptography, PKI, threat modelling.
• Embedded Linux, hardware/software interfaces, APIs, communication protocols.
• CI/CD, software supply‑chain security, SBOM/CBOM.
• Nice to have: FPGA/MPSoC, container security, vulnerability assessment, IEC 62443, Common Criteria, ISO/SAE 21434.