Aurora Engineering AB

Embedded Security Engineer (DevSecOps Focus)

Aurora Engineering AB Malmö, Skåne County, Sweden

IT Services and IT Consulting · 11-50 employees

20 h ago
security Senior (5-10 yrs) Full-time Sweden
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

Perform security testing, vulnerability assessments, and penetration testing on embedded systems while designing secure-by-design architectures. Secure Operational Technology (OT) environments through network segmentation, access control, and compliance with industry standards like IEC 62443.

What they look for

Embedded C/C++ RTOS Embedded Systems Development Security Testing Vulnerability Assessment Penetration Testing Secure Boot Secure Communication Threat Modeling OT Security Industrial Cybersecurity OPC UA IEC 62443 NIST Frameworks EU Cyber Resilience Act TARA

Requirements

Requires strong experience in Embedded C/C++, RTOS, and industrial communication protocols such as OPC UA. Candidates must have a solid understanding of threat modeling, secure boot solutions, and cybersecurity compliance frameworks.

Full description

We Are Hiring: Embedded Security Engineer (DevSecOps Focus)

We are looking for an experienced Embedded Security Engineer with a strong background in embedded software development and cybersecurity. The ideal candidate will have hands-on experience in security testing, threat assessments, and securing products within Operational Technology (OT) environments.

Key Responsibilities

  • Perform security testing, vulnerability assessments, and penetration testing of embedded systems.
  • Design and implement secure communication and secure boot solutions.
  • Conduct Threat Analysis and Risk Assessments (TARA).
  • Develop secure-by-design architectures for embedded products.
  • Secure OT environments through network segmentation, access control, monitoring, and asset discovery.
  • Perform cybersecurity compliance assessments against IEC 62443, NIST frameworks, and the EU Cyber Resilience Act (CRA).

Required Skills

  • Strong experience in Embedded C/C++, RTOS, and embedded systems development.
  • Knowledge of TCP/IP and industrial communication protocols, including OPC UA.
  • Experience with secure boot, secure communication, and threat modeling.
  • Hands-on experience in security testing and penetration testing.
  • Understanding of OT security and industrial cybersecurity.
  • Experience with security architecture, TARA, and secure-by-design principles.
  • Familiarity with IEC 62443, NIST, and CRA.

Nice to Have

  • Knowledge of IEC 61850.
  • Familiarity with ISO 27001.
  • Previous experience securing industrial or connected embedded products.

Similar roles