Product Security Architect
About this role
Role Overview
As a Security Architect at HBK, you will lead security architecture initiatives across our diverse product portfolio, including web, desktop, SaaS, cloud, embedded, and firmware solutions. You will act as a trusted advisor and hands-on expert, ensuring secure-by-design principles are embedded throughout the product lifecycle. This role requires deep technical expertise in security concepts, threat modelling, risk assessment, and modern development practices.
Key Responsibilities
Consult and Assist: Guide multiple product teams in creating risk analyses (e.g., TARA) and performing Threat Modelling using STRIDE or Product relevant methods
Enable Secure Design: Guide and mentor teams on secure software architecture principles and best practices.
Process Integration: Adapt software development processes to leverage modern security tools (e.g., Static Code Analysis, Fuzzing, Security Testing Frameworks).
Drive Security Decisions: Influence project decisions to implement robust security measures across products.
Code & Config Review: Actively review source code and configurations for vulnerabilities; train teams to prevent recurring issues.
Hardware Security: Provide guidance on hardware security measures and Secure Hardware Modules (SHM).
Cryptography: Ensure correct application of basic cryptographic techniques for data protection.
Compliance Alignment: Support adherence to relevant standards such as ISO 21434 (Automotive), IEC 62443 (Industrial), NIST SP 800 , EU CRA and ISO 27001.
Guide product teams in implementing security controls required to achieve EU CRA compliance
Qualifications
Education:
Bachelor's or Master's degree in computer sciences, Cyber Security or some other engineering degree.
Required Experience and Skills
Proven experience in security architecture across multiple product types (web, desktop, SaaS, cloud, embedded, firmware).
Deep technical understanding of security concepts (IAM, Secure Access, Secure Boot,Secure On board communication Encryption, Secure Coding Practices etc).
Hands-on experience in Threat Modelling (STRIDE), Risk Analysis (TARA), Vulnerability hunting and source code reviews.
Familiarity with one or more recognised security standards and regulations, such as EU CRA (Cyber Resilience Act), CSMS, UNECE R156/R157, ISO 21434 (Automotive), IEC 62443 (Industrial Control Systems), ISO 27001, and NIST SP 800 series
Strong background in modern software development (C++, Java) on Linux/Android.
Understanding of cryptographic fundamentals and secure hardware concepts.
Strong expertise in both System and SW Engineering
Expert in Requirement Engineering and requirement based development
Proven experience in leading engineering teams and managing customer-facing projects
Good understanding of different architectures, operating systems(Linux/QNX/Microsar), hardware & software security concepts, cryptography, debugging techniques
Experience in interfacing with customer and review of customer requirements with a focus on cybersecurity impacts.
Excellent communication skills to effectively engage with engineering teams, customers, and stakeholders.
Company at a glance
Hottinger Brüel & Kjær was founded in 2019, when HBM and Brüel & Kjær merged their activities into a new company.
Both companies are market leaders in their respective disciplines – Brüel & Kjær in sound and vibration and HBM in reliability, durability, propulsion efficiency and weighing. Together, they cover the complete product physics domain. In technical terms, Brüel & Kjær is the frequency domain expert and HBM the time domain expert.
HBK helps its customers reduce time-to-market by simultaneously performing tests, retrieving and analyzing data, aiding decision-making.
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?