Product Security & Compliance Engineer
Nabu Casa
Product Security & Compliance Engineer
Nabu Casa is seeking a full-time Product Security & Compliance Engineer to ensure connected hardware and cloud services are secure, resilient, and compliant with regulations like RED, EN 18031, and the Cyber Resilience Act. The role combines hands-on product security engineering with cybersecurity compliance, working across devices, firmware, networking, and cloud services. Strong technical security foundations and the ability to interpret requirements and work across engineering and compliance boundaries are essential.
Product Security & Compliance Engineer
Nabu Casa is seeking a full-time Product Security & Compliance Engineer to ensure connected hardware and cloud services are secure, resilient, and compliant with regulations like RED, EN 18031, and the Cyber Resilience Act. The role combines hands-on product security engineering with cybersecurity compliance, working across devices, firmware, networking, and cloud services. Strong technical security foundations and the ability to interpret requirements and work across engineering and compliance boundaries are essential.
Salary
Core Qualifications
Technical (Must-have)
Soft Skills
Preferred Qualifications
Technical (Nice-to-have)
Key Responsibilities
- Own the cybersecurity aspects of regulatory compliance for Nabu Casa's connected hardware products, including RED cybersecurity requirements and EN 18031.
- Help prepare Nabu Casa's products and processes for the EU Cyber Resilience Act (CRA), including vulnerability handling, security updates, SBOMs, support periods, and incident reporting.
- Create and maintain architecture and data-flow diagrams for connected products and services.
- Perform threat modeling and translate identified risks into security requirements and controls.
- Perform hands-on product security validation, including vulnerability and dependency scanning, SAST/DAST, firmware analysis, network and service exposure assessment, and targeted penetration testing.
- Generate and maintain Software Bills of Materials (SBOMs) and help monitor software dependencies for known vulnerabilities.
- Validate security mechanisms such as authentication, secure boot, and signed software or firmware updates.
- Translate security assessments and test results into structured compliance evidence, technical documentation, conformity assessments, and Declarations of Conformity.
- Work closely with hardware, firmware, cloud, and product teams to ensure security and compliance requirements are considered early in product development.
- Coordinate with our ODMs and external certification bodies where required, while owning Nabu Casa's cybersecurity evidence internally.
- Work with the Open Home Foundation to ensure security information, vulnerability handling, and software-related documentation flow effectively between open-source projects and Nabu Casa's commercial products.
- Keep track of product conformity status, security support periods, regulatory deadlines, and changes that may require reassessment.
- Provide privacy-by-design input for significant changes to our cloud services when needed.