17 ott - Genova
Generative Bionics
h3About Us /h3 pGenerative Bionics is a deep-tech company building humanoid robot platforms to deploy human-centered Physical AI. We design intelligent, capable machines that work alongside people in real-world environments — developed in Genova, Italy. /p h3Role /h3 pThe Product Security Engineer will strength the security of our products and ensure that cybersecurity is embedded throughout the entire product lifecycle.The role will contribute to the development of secure products by integrating security-by-design principles into hardware, software, embedded systems, AI-enabled capabilities, cloud-connected services, and supporting platforms. Working closely with engineering, product management, quality, and technology teams, the successful candidate will help identify and mitigate cybersecurity risks before products reach customers and throughout their operational lifecycle.The Product Security Engineer will play a key role in secure product development, threat modeling, vulnerability management, security validation, and regulatory product cybersecurity activities, ensuring that security requirements are effectively integrated into product design, development, testing, release, and post-market activities.The role will also support compliance and product assurance initiatives by collaborating with Information Security GRC Specialists, ICT Security Engineers, and engineering teams to align product cybersecurity activities with applicable regulations, standards, and industry best practices. /p h3Responsibilities /h3 ul liDefine, maintain, and promote product cybersecurity requirements throughout the product lifecycle; /li liSupport the adoption and continuous improvement of Secure Development Lifecycle (SDLC) practices across product development teams; /li liPerform threat modeling, attack surface analysis, abuse case analysis, and product security risk assessments; /li liCollaborate with engineering teams to integrate security-by-design principles into software, hardware, embedded, AI, cloud-connected, and robotics products; /li liReview product architectures and technical designs to identify cybersecurity risks and recommend appropriate mitigations; /li liSupport secure coding initiatives and provide security guidance to development teams; /li liCoordinate product security testing activities, including vulnerability assessments, security reviews, and penetration testing initiatives; /li liSupport vulnerability management activities, including identification, triage, tracking, remediation,
and verification of product security vulnerabilities; /li liContribute to Software Bill of Materials (SBOM) processes and support third-party component security reviews; /li liAssess security risks associated with open-source software, commercial software components, and external dependencies; /li liSupport and coordinated vulnerability handling activities; /li liContribute to post-market cybersecurity monitoring and product security incident investigations- Support the development and maintenance of product cybersecurity documentation, security requirements, risk assessments, and security evidence;; /li liCollaborate with quality, safety, compliance, engineering, and product teams to ensure cybersecurity requirements are addressed consistently; /li liSupport compliance activities related to the Cyber Resilience Act (CRA), EU AI Act, IEC 62443, and other applicable product cybersecurity requirements; /li liStay informed about emerging threats, vulnerabilities, attack techniques, and product security best practices relevant to robotics, AI, embedded systems, and connected products; /li /ul h3Requirements /h3 ul liBachelor’s or Master’s degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, Electrical Engineering, Robotics, or a related technical discipline; /li liMinimum 3 years of experience in Product Security, Application Security, Embedded Security, Security Engineering, IoT Security, Industrial Cybersecurity, or related technical cybersecurity roles; /li liStrong understanding of Security-by-Design and Secure Development Lifecycle (SDLC) principles; /li liExperience performing threat modeling, product risk assessments, and security architecture reviews; /li liKnowledge of application security, secure coding principles, and common software vulnerabilities; /li liUnderstanding of product cybersecurity concepts for connected devices, embedded systems, and cyber-physical products; /li liFamiliarity with vulnerability management processes and remediation tracking; /li liKnowledge of OWASP Top 10, OWASP ASVS,
and secure software development practices; /li liUnderstanding of Linux security concepts and system hardening techniques; /li liFamiliarity with cloud-connected product architectures and associated cybersecurity risks; /li liUnderstanding of authentication, authorization, cryptography, and secure communications principles; /li liKnowledge of software supply-chain security concepts and third-party component risk management; /li liAbility to analyze complex technical systems and identify security weaknesses; /li liStrong analytical, organizational, and documentation skills; /li liStrong communication skills and ability to collaborate effectively across engineering, product, quality, and business teams; /li liProfessional proficiency in English; /li liHigh standards of integrity, accountability, confidentiality, and professional judgment; /li liAvailability to travel nationally and internationally is expected; /li liExperience in robotics, autonomous systems, humanoid robotics, industrial automation, IoT, or cyber-physical systems; /li liExperience with embedded Linux environments and secure firmware development; /li liExperience securing AI-enabled products and machine learning systems; /li liExperience with Software Bill of Materials (SBOM) generation and management; /li liFamiliarity with penetration testing methodologies and security validation techniques; /li liExperience working within DevSecOps environments; /li liFamiliarity with industrial cybersecurity principles and IEC 62443; /li liCertified Secure Software Lifecycle Professional (CSSLP); /li liGIAC Defensible Security Architecture (GDSA); /li liGIAC Response and Industrial Defense (GRID); /li liOffensive Security certifications or equivalent; /li /ul h3We Offer /h3 ul liThe opportunity to help build one of Europe's most ambitious humanoid robotics companies; /li liWork on cutting-edge technologies at the intersection of AI, robotics, software, electronics, and manufacturing; /li liA collaborative, multidisciplinary, and fast-paced, high-growth innovation-driven environment; /li liDirect exposure to strategic programs with tangible impact on product development and company growth; /li liConcrete opportunities for professional development and career advancement; /li liCompetitive compensation aligned with experience; /li /ul h3Disclaimer /h3 pWe are proud to be an Equal Opportunity Employer. We evaluate all qualified applicants solely on the basis of merit and business needs, without distinction or discrimination based on gender, race, color, ethnic or social origin, age, religion, sexual orientation, gender identity, disability, or any other characteristic protected by law. /p #J-18808-Ljbffr
17 ott - Piove di sacco
In Job S. P. A.
17 ott - Roma
elettroteammarrinisrls
17 ott - Piove di sacco
In Job S. P. A.
17 ott - Sestu
OPENJOBMETIS