Cybersecurity Expert Developer / Owner (Industrial Embedded Systems)
We are seeking a Cybersecurity Expert Developer / Owner (Industrial Embedded Systems) to act as the primary cybersecurity authority across a critical portfolio of switchgear and industrial control systems.

This role combines hands‑on embedded software expertise with cybersecurity architecture ownership, ensuring products are secure by design, compliant with IEC 62443-4-2, and aligned with the EU Cyber Resilience Act (CRA) across the full product lifecycle.

Key Responsibilities

Act as the primary cybersecurity reference across the industrial product portfolio.

Define, review, and continuously improve cybersecurity architecture and practices.

Ensure full alignment with IEC 62443-3-4-2 and EU Cyber Resilience Act (CRA) requirements.

Support discussions with cybersecurity auditors and clearly explain technical implementations.

Collaborate with developers, architects, and product owners to embed security requirements.

Implement and promote secure communication, authentication, and system hardening practices.

Propose practical cybersecurity improvements aligned with real‑world industry usage.

Support containerised and Linux‑based embedded environments (e.g. Docker‑based systems).

Own end‑to‑end vulnerability and patch management processes.

Manage and maintain SBOM (Software Bill of Materials)



across products.

Track CVEs, dependencies, and security advisories.

Ensure timely patching and coordination of security updates across releases.

Maintain cybersecurity documentation for audits, customers, and internal governance.

Ensure security is embedded across design, development, testing, and release phases.

Provide evidence and artefacts for compliance and certification.

Analyse and interpret customer cybersecurity requirements.

Translate compliance and security requirements into actionable technical tasks.

Support global stakeholders including product, engineering, and application teams.

Required Skills & Experience

Strong programming experience in C++, C#, Python, and scripting (Bash / PowerShell).

Experience with Linux‑based embedded systems.

Understanding of distributed / service‑based architecture.

Experience with Docker or containerised deployments.

Proven experience in industrial, embedded, or IoT cybersecurity environments.

Strong understanding of secure communication and key management.

System hardening techniques.

Working knowledge of ISO/IEC 27001 and IEC 62443 standards.

Experience managing CVEs, security advisories, and vulnerability lifecycles.

Strong background in security patching.

#J-18808-Ljbffr

📌 Embedded Cybersecurity Engineer (Turbigo)
🏢 Altro
📍 Turbigo