About the Company
At Avaron, you get the security of permanent employment combined with the variety of working at different customers. We place specialists across everything from tech, IT and industry to project management and business support – and whatever the assignment, you have a consultant manager who is there for you and your development.
About the Role
You will support the development of several new products where cybersecurity needs to be built in from the start. The environment spans desktop applications and embedded systems, with technologies ranging from hardware-near firmware and RTOS to PC-based software and Windows environments.
In this role, you work close to developers and other technical stakeholders throughout the product development lifecycle. You combine hands-on cybersecurity work with secure software development, architecture, implementation and compliance activities linked to the EU Cyber Resilience Act.
You will collaborate with both local and global stakeholders and help strengthen secure development practices across multiple product initiatives. This is a strong opportunity for you if you want a technically broad role with real influence on security in product development.
Job DescriptionYou analyze current cybersecurity maturity and help drive compliance with the EU Cyber Resilience Act.
You perform cybersecurity risk assessments and follow up implementation activities with relevant stakeholders.
You coordinate cybersecurity work across product development projects and help keep security activities aligned with delivery needs.
You carry out and coordinate security testing, including DSAC testing.
You perform attack surface analyses and threat modeling to identify and reduce risk early in development.
You review security-critical source code and support developers in secure implementation choices.
You support system hardening, including work with Windows images.
You help ensure compliance with internal cybersecurity requirements and Secure Development Lifecycle processes.
You identify improvement opportunities within secure development practices and help turn them into practical ways of working.
You contribute to the requirements process and define relevant security requirements for new products.
You design and implement security solutions for desktop applications and embedded systems.
You drive security updates, vulnerability management and remediation activities.
You prepare cybersecurity documentation covering areas such as architecture, manuals, processes and agreements.
You support development projects ahead of cybersecurity and security reviews.
You monitor vulnerabilities, threats and security updates, and you support assessments of suppliers' compliance with cybersecurity requirements.
RequirementsYou have solid experience in cyber security within product development.
You have practical experience working with secure development processes.
You are comfortable supporting development teams in security requirements, secure design, implementation, testing and vulnerability management.
You have experience of secure software development, security architecture and implementation.
You communicate well and collaborate effectively with a wide range of technical stakeholders in local and international environments.
Nice to haveExperience with CRA compliance.
Experience with Secure Development Lifecycle (SDLC).
Experience with threat modeling, security testing and security architecture.
Experience from software development, software architecture or embedded systems.
Experience with embedded systems and firmware.
Experience with C, C++, VHDL, Assembler, RTOS, C#, Java or Windows-based applications and environments.
What We OfferPermanent employment at Avaron AB
Occupational pension
Wellness allowance of SEK 5,000 per year
Application
Selections are made on an ongoing basis – apply as soon as you can.