Product Security & Compliance Engineer

📋 Description

• Hands-on product security engineering across embedded hardware and cloud services.
• Translate findings into practical security controls and compliance evidence.
• Collaborate with hardware, firmware, cloud, product, and cert teams.
• Prepare technical evidence for product conformity and regulatory assessments.
• Embed security and compliance early in the development lifecycle.
• Work in a distributed, autonomous, privacy-focused environment.

🎯 Requirements

• Strong hands-on experience in one security domain (embedded/firmware, network, app, or cloud).
• Experience creating architecture/data-flow diagrams; threat modeling.
• Practical security testing: SAST/DAST, SBOM tooling, vulnerability scanning, firmware analysis.
• Experience with connected products, IoT, or firmware-hardware-cloud setups.
• Ability to translate findings into documentation, risk assessments, conformity docs.
• Knowledge of EN 18031, RED, EU Cyber Resilience Act, ETSI EN 303 645, ISO 27001, OWASP MASVS/ASVS

🎁 Benefits

• Full-time role with competitive compensation; UK range listed in description.
• Generous PTO and parental leave policies; sick leave as per local provisions.
• Remote-first setup with hardware budget and home office support.
• Home internet subsidy and equipment allowances; flexible schedule.
• Remote work with international collaboration and open-source privacy focus.