Cyber Security Architect

About the role

The Cyber Security Architect will lead threat modeling, security assessments, and compliance activities across a wide range of product ecosystems, ensuring robust security architecture and governance.

Key responsibilities

• Review, validate, and refine product threat models using methodologies such as STRIDE, PASTA, and Attack Trees.
• Perform comprehensive security assessments on applications, Linux platforms, containerized environments, REST APIs, FPGA‑integrated systems, and production processes.
• Analyze product architectures against internal cybersecurity standards and industry best practices, focusing on hardware and software trust boundaries.
• Assess compliance with the EU Cyber Resilience Act, create Cryptographic Bill of Materials, and identify remediation gaps.
• Develop remediation plans for UI, platform, Linux, FPGA, and build‑release teams, and provide ongoing security consulting and design reviews.

Required profile

• Strong experience in threat modeling and application security across diverse technology stacks.
• Deep knowledge of hardware security mechanisms such as TPM, TEE, and Secure Boot.
• Familiarity with EU cybersecurity regulations, especially the Cyber Resilience Act.

Required skills

• Threat Modeling (STRIDE, PASTA, Attack Trees)
• Application Security (AppSec)
• Product Security Architecture Reviews
• Secure SDLC & Secure‑by‑Design
• API Security, Container Security, Linux Security
• FPGA Security, MPSOC
• Hardware Security Architecture (TPM, TEE, Secure Boot)
• EU Cyber Resilience Act compliance