Security Architect

• Perform requirements analysis, including reviews, control and traceability of requirements, management of change requests, and documentation, specifically for requirements with cybersecurity implications.
• Lead the Threat Modeling process, including conducting Threat Analysis and Risk Assessments (TARA).
• Develop and maintain the cybersecurity system architecture and the Product Development Document.
• Evaluate and approve solutions proposed by third-party vendors.
• Provide cybersecurity technical expertise and guidance across software, hardware, and manufacturing development activities, including managing cryptographic keys, throughout the entire product development lifecycle.
• Define and maintain the cybersecurity concept for the product.
• Oversee and support cybersecurity activities in software, hardware, and production development, ensuring alignment with cryptographic key management requirements throughout the project lifecycle.
• Assist the Product Cybersecurity Manager in preparing key cybersecurity documentation, such as the Cybersecurity Concept Document, Cybersecurity Plan, Cybersecurity Assurance Document, SSDP, and CRMP.
• Collaborate regularly with teams including Systems, Software, ITV, Production, and Penetration Testing to conduct cybersecurity testing and validate results.

• Salary: 170-200 PLN, B2B via Devire 
• Hybrid work model 
• Benefits: Multisport card, private medical care, life insurance 
• Long-term cooperation 
• Flexible working hours, Polish time zone 

• Programming Expertise:
• 5+ years of experience in C programming, preferably in an embedded environment.
• Professional experience in C++ programming.
• Knowledge of Object-Oriented Programming (OOP) concepts and software design skills.

• Security Knowledge:
• Ability to perform risk assessments, identify threats, and design countermeasures.
• Understanding of security mechanisms in modern operating systems (e.g., MAC, DAC, ASLR, stack/heap protection, isolation).
• Basic understanding of cryptography, including knowledge of state-of-the-art cryptographic schemes and the ability to choose appropriate solutions for given scenarios.

• System and Tool Proficiency:
• Hands-on experience with Linux or UNIX-type systems (e.g., QNX, xBSD).
• Good knowledge of at least one source code version control system (e.g., Git, Mercurial).
• Familiarity with networking protocols (e.g., Ethernet/IP).

• Communication Skills:
• Excellent command of English (spoken and written).
• Ability to write grammatically correct and clear design documents.

Preferred Qualifications (Nice-to-Have):

• Experience in the automotive industry.
• Basic understanding of microprocessor-based electronic device hardware.
• Hands-on experience with low-level communication protocols such as CAN, LIN, Ethernet, FlexRay, SPI, I2C, and UART.
• Knowledge of policy-based OS security features (e.g., SELinux, Grsecurity).
• Experience with the implementation of networking protocols.
• Programming in interpreted languages (e.g., Python, Ruby).
• Experience with UNIX-based system administration.