Cybersecurity Engineer

Cybersecurity Engineer

Berlin

€74,000 – €80,000 + equity

The company

An early-stage, well-backed robotics safety business in Berlin. They build certifiable, hardware-agnostic safety systems that let autonomous machines operate around people — retrofittable onto existing platforms rather than tied to one vendor's controller. Small, senior team, already deploying with recognised robotics partners.

The role

A robot that can be compromised is a robot that can't be trusted, security is the other half of the safety guarantee here. With the EU Cyber Resilience Act now in force (reporting obligations from September 2026, full application December 2027), this is a build-it-properly-from-the-start role. You'll own the security architecture, the threat model, and the evidence base that gets the product through every customer security review and regulator conversation.

• Design end-to-end platform security: supply chain, build pipeline, deployed runtime, update channel
• Deliver CRA (Regulation (EU) 2024/2847) Annex I conformance and the IEC 62443-4-1 / -4-2 evidence base for first customer deployment
• Run TARA on every integration and turn findings into shipped mitigations
• Own incident-response readiness, pen-test relationships, and the security artefacts customers actually audit
• Work alongside the safety engineer so safety and security stay one property, not two workstreams
• Set the secure engineering bar for the team

What you'll need

• 5+ years in product or platform security, with real software engineering fluency - production C and C++
• Embedded Linux and firmware hardening, including secure boot chains
• IEC 62443-4-1 and -4-2, ISO/IEC 27001, plus working literacy in CRA Annex I and TARA methodology
• Cloud security fluency
• Cryptographic primitives and PKI run in production

What's on offer

A core-team seat with genuine ownership of the security architecture, direct line to live customer deployments, and equity through the company's incentive plan. Visa sponsorship and relocation within Europe supported.

Process: intro call, technical conversation, deep-dive session, offer. Two to three weeks start to finish.