N
Senior Product Security Compliance Architect
Not specifiedFull-timeSecurity EngineeringSemiconductorsComputer Hardware
Lead technical product security compliance across hardware, firmware, and software. Translate regulations into engineering requirements, scale secure development workflows, and guide certifications and automation.
Responsibilities
- Translate global cybersecurity regulations and legal mandates into technical specifications and engineering rules.
- Optimize and scale secure product development lifecycle processes across software, firmware, and hardware pipelines.
- Lead security evaluations and certification initiatives, including technical reviews with testing laboratories and engineering teams.
- Build automation and AI workflows for compliance tracking, evidence collection, and security verification.
- Partner with hardware, software, product management, and legal teams to advance product security architecture and compliance readiness.
Requirements
- At least 5 years of experience in security engineering, product security governance, or secure development programs.
- Bachelor’s or master’s degree in computer science, computer engineering, electrical engineering, or equivalent experience.
- Strong knowledge of secure product and system development lifecycles, risk management standards, and global security regulations.
- Practical expertise in secure development lifecycles, threat modeling, risk engineering, and hardware or software security.
- Ability to assess system architectures, low-level firmware, and codebases against governance requirements.
- Experience leading hardware, firmware, or software products through third-party security evaluations, testing, or formal validation.
- Ability to write code and build automation scripts, AI workflows, or tools for engineering and security tasks.
Nice to have
- Experience with regulatory conformity assessments, including EU CRA or GDPR.
- Exposure to silicon security, microarchitectures, low-level firmware, or embedded devices.
- Experience with cryptographic validations, FIPS 140-3, Common Criteria, or accredited testing laboratories.
- Relevant technical security certifications.