Product Security & Compliance Engineer

📋 Description

• Own cybersecurity aspects of regulatory compliance for connected hardware products
• Support EU Cyber Resilience Act programs, including vulnerability mgmt, updates, SBOMs, support
• Create and maintain architecture and data-flow diagrams for connected products
• Perform threat modeling and translate risks into security requirements
• Hands-on product security validation: scans, SCA, firmware, network/service exposure, pentesting
• Generate SBOMs to manage software dependencies vulnerabilities

🎯 Requirements

• Hands-on experience in at least one security domain (embedded/firmware, network, app, or cloud)
• Experience creating diagrams and threat modeling for real systems
• Experience with security testing tools: vulnerability scanning, SAST/DAST, SBOM tooling, firmware
• Experience with connected products/IoT/embedded systems
• Ability to translate findings into documentation, risk assessments, compliance requirements
• Strong understanding of security principles, vulnerability management, supply-chain risks

🎁 Benefits

• Full-time employment with competitive compensation (75th percentile)
• UK compensation £81,800–£102,700
• Paid time off and sick leave; parental leave with compensation
• Budget for work hardware and personal-use retention after 3 years
• Annual smart-home budget; home internet contribution; time for personal projects
• Opportunity to work on privacy-focused, open-source, connected tech