Product Security & Compliance Engineer

📋 Description

• Own cybersecurity aspects of regulatory compliance for connected hardware products, incl. RED and
• Support EU Cyber Resilience Act readiness: vulnerability mgmt, security updates, SBOMs, support
• Create and maintain architecture/data-flow diagrams for connected products/services.
• Conduct threat modeling and translate risks into security requirements and priorities.
• Hands-on product security validation: vulnerability scanning, SAST/DAST, SBOM tooling, firmware
• Generate/monitor SBOMs to manage software dependencies vulnerabilities.

🎯 Requirements

• Strong hands-on technical experience in at least one domain (embedded/firmware, network
• Experience creating architecture/data-flow diagrams and threat modeling for real-world products.
• Practical security testing tools: vulnerability scanning, SAST/DAST, SBOM tooling, firmware
• Experience with connected products/IoT and security in hardware-cloud environments.
• Ability to translate security findings into documentation, risk assessments, and compliance
• Knowledge of security principles, vulnerability management, software supply-chain risks, and secure

🎁 Benefits

• UK compensation range £81,800–£102,700, based on experience.
• Five weeks paid vacation; paid sick leave; parental leave with compensation.
• Fully remote work environment; hardware budget; smart-home budget for tech needs.
• 50% of home internet cost; time for personal projects; support for Home Assistant side projects.
• Opportunity to work on privacy-focused, open-source connected tech with global reach.
• Collaborative, distributed team focused on autonomy, ownership, privacy, and sustainability.