Security Architect

Security Architect | Device & Embedded Security | Munich | 24 months | Up to €120,000 p.a. (negotiable) | AUG Contract

This is not a cloud security role. It is not an application security role. If your background is device security, firmware security or OT-adjacent product security, it is worth reading on.

A world-leading technology organisation in Munich is looking for a Security Architect who has genuinely worked on the security of physical devices — not software products in the abstract sense, but hardware in the field: devices that get lost, returned, tampered with and decommissioned. The organisation manufactures high-end electronic equipment deployed across defence, secure communications and measurement technology in more than 70 countries.

The work centres on building concrete security architecture for physical tracking and locator devices: theft protections, secure data wiping, device hardening and isolation, secure provisioning and deprovisioning, and structured threat modelling against real-world hardware attack scenarios. If you have worked with TARA or comparable hardware threat modelling frameworks, that is a strong advantage.

Candidates with a background purely in web, cloud or enterprise application security are not a match for this role. The hiring team has been specific about that.

What you will need:

Hands-on device or embedded security architecture experience — IoT, firmware, automotive product security or OT. Ability to design concrete security concepts, not only frameworks. Practical understanding of device threat scenarios: theft, tampering, reset attacks, data remanence. Experience with secure provisioning and deprovisioning. Familiarity with TARA or equivalent hardware threat modelling.

Business-fluent German — mandatory.

Location: Munich | Contract: AUG | Up to 24 months | Up to €120,000 p.a. | Start: ASAP