Senior Product Security Compliance Architect
Lead technical product security compliance across hardware, firmware, and software. Translate regulations into engineering requirements, scale secure development workflows, and guide certifications and automation.
תחומי אחריות
- Translate global cybersecurity regulations and legal mandates into technical specifications and engineering rules.
- Optimize and scale secure product development lifecycle processes across software, firmware, and hardware pipelines.
- Lead security evaluations and certification initiatives, including technical reviews with testing laboratories and engineering teams.
- Build automation and AI workflows for compliance tracking, evidence collection, and security verification.
- Partner with hardware, software, product management, and legal teams to advance product security architecture and compliance readiness.
דרישות
- At least 5 years of experience in security engineering, product security governance, or secure development programs.
- Bachelor’s or master’s degree in computer science, computer engineering, electrical engineering, or equivalent experience.
- Strong knowledge of secure product and system development lifecycles, risk management standards, and global security regulations.
- Practical expertise in secure development lifecycles, threat modeling, risk engineering, and hardware or software security.
- Ability to assess system architectures, low-level firmware, and codebases against governance requirements.
- Experience leading hardware, firmware, or software products through third-party security evaluations, testing, or formal validation.
- Ability to write code and build automation scripts, AI workflows, or tools for engineering and security tasks.
יתרון
- Experience with regulatory conformity assessments, including EU CRA or GDPR.
- Exposure to silicon security, microarchitectures, low-level firmware, or embedded devices.
- Experience with cryptographic validations, FIPS 140-3, Common Criteria, or accredited testing laboratories.
- Relevant technical security certifications.