Job Description

About the Role

At ARX Robotics, security is not an afterthought. It is designed in from day one. As our Sr. Cybersecurity Engineer, you will be the driving force behind product security across the full lifecycle of our autonomous ground systems, from early architecture through deployment and beyond. You will work side by side with software, systems, and cloud engineering teams to ensure that everything we ship is resilient, trustworthy, and built to withstand real-world threats.

This is a role for someone who thrives at the intersection of deep technical expertise and cross-functional influence. You will shape how ARX builds products, not just review them after the fact.

What You'll Build

• A robust product security program, including requirements, standards, and best practices that engineering teams can actually use.
• Threat models and security risk assessments for new and existing products, using methodologies such as STRIDE and ATT&CK.
• Security architecture reviews that identify risks early and feed practical mitigations directly into product design decisions.
• A DevSecOps culture, integrating automated security testing into CI/CD pipelines and championing secure-by-default principles across development.
• Secure supply chain practices, including rigorous evaluation of third-party components, open-source dependencies, and software bills of materials.
• Vulnerability management processes that span internal triage, remediation tracking, and transparent customer-facing disclosures.
• Security guidance and targeted training that raises the security bar across engineering teams, not just within a dedicated function.
• Compliance alignment with relevant frameworks, including IEC 62443, EU Machinery Regulation 2023/1230, prEN 50742, NIST SP 800-82, and the Cyber Resilience Act (CRA) 2024/2847.

What You Bring

• 7+ years of experience in product security, application security, or secure software development, ideally within complex or regulated product environments.
• A degree in Computer Science, Cybersecurity, Software Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
• Solid command of secure development principles, including authentication, authorization, encryption, secrets management, and secure communications.
• Hands-on experience with security architecture reviews, threat modeling, and a range of security testing methods (SAST, DAST, SCA, fuzzing, penetration testing).
• Practical experience with cloud-native applications, APIs, containers, and microservices, and the security challenges they introduce.
• Familiarity with defense, embedded, or operational technology security: secure boot, HSMs, firmware integrity, or teleoperation system security are all genuine assets.
• Strong communication skills and the ability to engage effectively with engineering teams, leadership, customers, and auditors.
• Relevant security certifications (such as CSSLP, CISSP, GWAPT, or cloud security credentials) are a plus, not a prerequisite.

Please note: You do not need to meet every single requirement to apply. We welcome motivated candidates who are eager to grow into the role and develop their expertise further.

What We Offer

Join a mission-driven European defense tech company at a pivotal stage of growth, where you can help shape meaningful technology, take ownership early, and grow with the business!

• Competitive compensation package including a bonus opportunity
• 27 vacation days to start, increasing with tenure up to 30 days
• Employer-supported pension contribution
• Learning & development support and team events budget
• Employee discounts and flexible benefits budget via Probonio
• Hybrid working setup depending on role and team needs
• Structured salary bands, levelling framework, and bi-annual development conversations
• Referral bonus program, dog-friendly office, and relocation support where applicable