- Location
- München, Bayern
- Type
- Full-time
- Department
- Engineering
- Experience
- 3+ years
- Source
- Personio
Description
Your role
We are seeking a Cybersecurity Architect to lead cybersecurity activities for our robotics systems. This role focuses on system-level cybersecurity architecture, risk assessment, secure development of lifecycle practices, and compliance with applicable regulations and industrial security standards, including the EU Cyber Resilience Act (CRA) and IEC 62443.
The role works closely with systems, software, hardware, and safety experts to ensure that cybersecurity is designed across the full product lifecycle—from architecture to certification and deployment.
Your experience and qualifications
Key Responsibilities :
1. Security Advisory & Governance
- Provide expert guidance on OT security policies, standards, and best practices.
- Advise engineering, operations, and project teams on security implications of design changes, system upgrades, and new technology deployments.
- Develop and maintain secure architectures for OT products.
- Define and enforce network segmentation and product decomposition into zones and conduits.
- Review system designs and engineering changes for security implications.
- Define, maintain, and review system-level cybersecurity requirements with full traceability across product architecture
- Conduct OT-specific threat and assessments and threat modelling (e.g., in accordance with IEC 62443 and NIST CSF according to STRIDE).
- Perform vulnerability assessments of OT products, networks and exposed interfaces.
- Maintain visibility on cybersecurity risks across a family of products.
- Translate technical findings into business‑relevant risks and actionable recommendations.
- Lead or support investigations of OT cyber incidents and support recovery plans.
- Conduct root-cause analysis and recommend improvements.
- Implement and enforce OT cybersecurity policies, standards, and procedures.
- Ensure compliance with internal controls and industry regulations according to IEC 62443-4-x.
- Work closely with engineering, maintenance, IT security, and production teams to ensure secure operations.
- Organise training for operators and engineers on cybersecurity principles and best practices.
- Provide guidance during supplier selection, procurement, and system integration.
- Support OT network upgrades, digital transformation initiatives, and modernization projects.
- Evaluate and integrate new cybersecurity solutions for industrial environments.
Education & Experience
- Bachelor’s or Master’s degree in Engineering, Computer Science, Cybersecurity, or related field.
- 3–7 years of experience in OT/ICS environments, industrial automation, or cybersecurity roles.
- Strong understanding of ICS/OT protocols (TCP/IP, Modbus, OPC-UA, EtherNet/IP, etc.).
- Experience with network security technologies (firewalls, IDS/IPS, NAC).
- Familiarity with hardening of Linux OT real-time environments.
- Experience with cybersecurity frameworks like IEC 62443.
- IEC 62443 Cybersecurity Expert
- Strong communication and stakeholder management skills.
- Analytical thinker with structured problem‑solving abilities.
- Able to work hands‑on in industrial environments.
- Team‑oriented mindset with a focus on enabling safe and secure operations.
Why us?
Skills
LinuxCybersecurityTCP/IPComplianceProcurement