Security Architect

NEURA Robotics builds cognitive robots and AI systems that operate in the real world — and the security surface that comes with that is as complex as the products themselves. You will join and strengthen a growing cybersecurity team, providing technical guidance to product engineers and security specialists across our verticals while helping expand our horizontal InfoSec function into a mature, enterprise-wide capability. Working across IT and product engineering, you will refine what is already in place, raise the bar where it matters, and make security a genuine competitive advantage rather than a bottleneck.

Your mission & challenges

• Shape and evolve security architecture across IT and product — reviewing designs, identifying weaknesses, and driving hands-on improvements across embedded systems, cloud services, and enterprise IT

• Develop and maintain reference architectures for the highest-risk areas: secure OTA update pipelines, Zero Trust network design, cloud-native security, embedded and firmware security, IAM, and secrets management

• Lead threat modelling for high-impact initiatives across product verticals and IT infrastructure — producing prioritised risk maps, not lengthy audit reports

• Own and maintain the organisation-wide security risk register, translating technical findings into business-relevant assessments that leadership can act on

• Establish the security standards every team is expected to meet and drive adoption without creating friction for developers — guardrails, not gates

• Integrate security into the development lifecycle: select and tune SAST/DAST tooling, secrets scanning, and dependency scanning across CI/CD pipelines

• Own vulnerability management: CVE triage process, remediation SLAs, and coordination across product verticals and IT operations

• Map NEURA's product and IT landscape against regulatory requirements — EU Cyber Resilience Act, NIS2, ISO 27001, IEC 62443 — and close gaps proactively

• Define the security bar for third-party components, libraries, and vendor integrations entering the supply chain

• Scope and coordinate external penetration tests; validate that findings are remediated, not just acknowledged

• Define what good looks like for future Product Security Engineers embedded in our product verticals — shaping their hiring profiles, mandates, and onboarding

• Serve as the technical bridge between security and engineering: review major architectural decisions, communicate trade-offs, and translate risk into terms both developers and leadership can act on