Software Security Designer – Cyber Resilience Act / IEC
Key Skills
Job Description
At Sioux Technologies, cybersecurity is rapidly becoming a core engineering discipline. Rather than treating security as an afterthought, we help our customers design cyber-resilient products from the earliest system concepts onward. In this role you help our customers develop cyber-resilient high-tech products that comply with the latest European cybersecurity legislation and industrial security standards. You work on complex systems in the semiconductor, medical, analytical instrumentation and industrial automation domains, translating cybersecurity requirements into practical software solutions. What excites you as a Software Security Designer – Cyber Resilience Act / IEC? From any Sioux office in the Netherlands, you will work in mono-disciplinary and multidisciplinary teams to design, implement and validate secure software that meets regulatory requirements and industry-standard security frameworks. You enjoy: Translating a security architecture into software design Performing software security design reviews and implementing secure-by-design principles. Supporting threat modelling (STRIDE, OWASP, attack trees, misuse cases). Performing cybersecurity risk assessments and defining security requirements for embedded and application software. Implementing authentication, authorization, encryption and secure communication. Improving software supply chain security (SBOMs, dependency management, vulnerability management). Developing CRA and IEC 62443 compliant software. Sounds good so far? We’d love to tell you more….. Your future workplace This is what you bring to the table You combine extensive software engineering experience with deep knowledge of secure product development, helping customers implement security throughout the entire software lifecycle. To be successful in this role, you have: A Bachelor's or Master's degree in Computer Science, Embedded Systems, or a related technical field. More than 7 years of experience in software development (C++, C#, Java, and/or embedded software) within the medical technology, semiconductor, analytical instrumentation, and/or industrial automation industries. Demonstrable experience in implementing security requirements for products subject to one or more of the following regulations: CRA, NIS2, and AIA. Experience with one or more of the following security standards: IEC 62443, IEC 81001, and ISO/IEC 27001. Experience with threat modeling and vulnerability management (CVE, CVSS, PSIRT). Experience generating Software Bills of Materials (SBOMs) and securing the software supply chain. Experience with secure coding guidelines (such as CERT, MISRA, and OWASP) and working in Agile, DevOps, and DevSecOps environments. This is what you can expect in return from Sioux Flexible 32-40 hour working week, with room to work from home. A healthy work-life balance is very important to us. We have 28 holidays with an option to acquire an additional 12 holidays. You will work with passionate colleagues who share your drive for technology and business success. By combining our expertise in software, electronics, mechanics, mechatronics, mathematics and assembly, we make the impossible possible for our customers and get to work on challenging high-tech projects. You get a lot of freedom and responsibility; after all, you know exactly what you are doing. Personal coaching and a training budget of €6000 per year, so that you can continue to develop yourself. We also find it important to have fun together. We organize a lot for our employees, from family festivals and sparkling Christmas parties, to inspiring knowledge sessions for the high-tech community. You will be working at a prime location in the heart of the Brainport region. You will be working on the Sioux Campus and can use our Sioux Labs living room every day for lunch, sports, making music, and sharing your knowledge with colleagues in one of our Tech Labs. High Tech & High Fun We can tell you all about the typical Sioux-culture and the high-tech challenging projects. About how you can develop yourself, like nowhere else. But we’d rather have you hear it from our own employees. Go to testimonials > If you want to know more about our challenging projects, please click here. Important note: This position requires access to controlled technology, as defined in the US Export Administration Regulations (15 C.F.R. 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require Sioux to proceed with candidates who are immediately eligible to access controlled technology.
Core Responsibilities
Design, implement, and validate secure software for high-tech products, translating cybersecurity architectures, regulations, and standards into practical software requirements and solutions. Conduct security design reviews, support threat modeling and risk assessments, and strengthen product security through secure coding, vulnerability management, and software supply chain practices.
Requirements
A bachelor's or master's degree in computer science, embedded systems, or a related technical field, plus more than seven years of software development experience in relevant high-tech industries. Candidates should have experience with product security regulations and standards, threat modeling, vulnerability management, SBOMs, secure coding guidelines, and Agile, DevOps, or DevSecOps environments.
Benefits
- Flexible Working Hours
- Work From Home
- 28 Holidays
- Additional Holiday Purchase Option
- Personal Coaching
- Annual Training Budget
- Employee Events
- On-Site Campus Facilities
About Sioux Technologies
Industry: Industrial Machinery Manufacturing
Company size: 1,001-5,000 employees
Sioux Technologies brings high-tech to life, contributing to a society that is healthy, safe, smart, sustainable and more fun. We are a strategic high-tech solutions partner that develops, innovates and assembles complex high-tech systems with advanced Software, Mathware, Electronics and Mechatronics. As the largest privately-owned tech company in the Netherlands, we are focused on people and building long-term relations. We are continuously developing our 1200+ bright employees. This way, we create more fun & value, for our employees, our inter(national) customers, Sioux and the world around us.