Security Architect / Specialist (m/f/d)
GlobalTech Recruitment GmbH
Ansprechpartner: Damien Taggart
Stuttgart, Deutschland
ITCompTIA Advanced Security PractitionerCisco Certified Internetwork Expert Security (CCIE Security)Data ArchitectureGIAC Security Essentials CertificationGIAC Security Leadership CertificationReverse Engineering Malware CertificationInformationsarchitekturSicherheitstechnikIndustry Standard ArchitectureFachkraft für Sicherheitstechnik von InformationssystemenNetwork SecuritySoftware ArchitectureQualified Security AssessorSun Certified Enterprise Architect (SCEA)Security AdministratorSicherheitsanalyseSicherheitsprüfung in der InformationstechnologieSicherheitsanforderungenSolution ArchitectureSystemarchitekturSystemsicherheitIntegrale SicherheitTechnologie-ArchitekturSicherheitssystemeSicherheitsauditsSicherheitsstrategienIT-ArchitekturSoftware SecurityIt-sicherheitsstandardsRegistered ArchitectWorkday SecurityTechnische SicherheitSicherheitskritischeCompTIA Security Analytics Professional (CSAP)Citect SCADASicherheitsbestimmungenSicherheitsorchestrierung, Automatisierung und ReaktionStatic Application Security Testing
Beschreibung
Location: Stuttgart, Germany
Start: ASAP
Contract Duration: 24 months
Working Hours: 40 hours/week
On Site: Minimum 2 days per week in Stuttgart
We are looking for an experienced Security Architect / Security Specialist to support the design, development and implementation of secure products and systems.
The role combines security architecture, threat and risk analysis, information security, regulatory compliance and secure product development. You will work closely with engineering and development teams to translate security requirements into practical architectural and technical measures.
Key Responsibilities
Security Architecture & Design
Design and evaluate architectures and security concepts
Define and review security measures to meet project security objectives
Implement security requirements at conceptual and architectural level
Support developers in implementing security requirements through effective developer enablement
Ensure security, approval and certification requirements are considered throughout the development lifecycle
Threat & Risk AnalysisConduct structured threat analyses
Identify security threats, vulnerabilities and potential attack scenarios
Derive appropriate security requirements from threat analysis results
Perform risk analyses and develop suitable mitigation measures
Information Security & ComplianceEnsure information security requirements are incorporated into projects
Apply relevant security standards and frameworks, including:
ISO 27001
NIS-2
BSI IT-Grundschutz
Common Criteria
Support compliance and security approval activities
EU Security RegulationsApply relevant European cybersecurity and product security regulations, including:
Cyber Resilience Act (CRA)
Radio Equipment Directive (RED)
Data Act
Translate regulatory requirements into practical security and product development measures
Secure Product DevelopmentSupport secure product development from requirements through implementation
Apply secure-by-design principles
Define security requirements and controls throughout the product lifecycle
Work with development teams to ensure security requirements are properly implemented
Mandatory RequirementsEducation
Completed degree in Electrical Engineering or a comparable technical field
Cyber & IT SecurityPractical professional experience in Cyber Security and IT Security
Hands-on experience applying security concepts in real-world projects
Strong understanding of security architecture and security engineering
Common Criteria & BSIExperience working according to established security processes
Practical experience with Common Criteria
Experience with security approval and certification processes
Knowledge and practical experience with BSI IT-Grundschutz
ISO 27001 & NIS-2Solid knowledge of ISO 27001
Practical project experience with NIS-2
Ability to translate information security requirements into project and technical measures
EU Security RegulationsPractical knowledge and application of:
Cyber Resilience Act (CRA)
Radio Equipment Directive (RED)
Data Act
Secure Product DevelopmentDemonstrable experience developing secure products
Experience applying secure-by-design principles
Understanding of security requirements throughout the product development lifecycle
On Site AvailabilityWillingness and ability to work at least 2 days per week on site in Stuttgart
Key Standards & Frameworks
Security & Compliance
Common Criteria
BSI IT-Grundschutz
ISO 27001
NIS-2
EU Regulations
Cyber Resilience Act (CRA)
Radio Equipment Directive (RED)
Data Act
Ideal Candidate
The ideal candidate combines strong technical security knowledge with practical experience in security architecture, threat and risk analysis, secure product development and security certification.
You should be comfortable working with development teams, translating regulatory and security requirements into actionable technical measures, and supporting products through security approval and certification processes.