Product Security

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7zawk2

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Product Security & Compliance Engineer based in Italy.

This role combines hands-on product security engineering with cybersecurity compliance across connected hardware and cloud services.
You will help build secure, resilient products while ensuring they meet evolving regulatory and cybersecurity requirements.
Your work will span embedded devices, firmware, networking, software dependencies, and cloud services.
You’ll conduct threat modeling, security validation, vulnerability assessments, and supply-chain risk management while translating findings into practical controls.
The role also involves preparing technical evidence and documentation for product conformity and regulatory assessments.
You’ll collaborate closely with hardware, firmware, cloud, product, external manufacturing, and certification teams in a distributed environment.
It is an opportunity to take meaningful ownership at the intersection of product security, compliance,



connected technology, and privacy.

Accountabilities
- Own cybersecurity aspects of regulatory compliance for connected hardware products, including RED cybersecurity requirements and EN 18031.
- Support preparation for the EU Cyber Resilience Act, covering vulnerability management, security updates, Software Bills of Materials, support periods, and incident reporting.
- Create and maintain architecture and data-flow diagrams for connected products and associated services.
- Conduct threat modeling and translate identified risks into actionable security requirements, controls, and engineering priorities.
- Perform hands-on product security validation, including vulnerability and dependency scanning, SAST/DAST, software composition analysis, firmware analysis, network and service exposure assessments, and targeted penetration testing.
- Generate, maintain, and monitor SBOMs to identify and manage vulnerabil

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7zawk2