Description

Lead architecture reviews and threat modeling for embedded systems, ensuring security integration from design through deployment.

Responsibilities

• Lead comprehensive architecture reviews and threat modeling assessments using STRIDE and TARA frameworks.
• Analyze ARM/SoC and MCU device architectures to identify vulnerabilities and define attack scenarios based on design flaws.
• Translate architectural risks into actionable VAPT test cases and oversee detailed security risk assessments.
• Evaluate secure boot, update processes, and hardware root of trust implementations for compliance with RED 18031 and IEC 62443.
• Mentor engineering teams on secure design practices and document remediation measures for hardware-software integration gaps.

Required Skills

• 10+ years of experience in product security, with deep expertise in embedded system architectures (ARM, SoC, MCU).
• Proficient in threat modeling frameworks including STRIDE and TARA.
• Strong knowledge of compliance standards: RED 18031, IEC 62443, and ISO 27001.
• Ability to integrate architectural risk assessments with VAPT planning and attack surface analysis.
• Experience with secure boot evaluations, hardware root of trust, and hardware-software integration security reviews.
• Bachelor’s degree in Electronics, Embedded Systems, or Information Security.
• Excellent technical documentation and reporting skills for bridging technical and compliance teams.

Preferred Skills

• CISSP, CSSLP, or equivalent secure design certifications.

Key Skills

Education

Bachelor's degree