Product Security Architect - Remote
TrustMinds, Inc.
Dice Job Match Score™
🔢 Crunching numbers...
Job Details
Skills
- product security
Summary
- BE/BTech/MS/MTech in Computer Science, Electrical Engineering, Computer Engineering, or a related field
- 12+ years of experience in product/embedded security, IoT security architecture, or security engineering for hardware products
- Deep expertise in ARM security architecture: TrustZone (Cortex-A TEE/OP-TEE), TrustZone-M (Cortex-M), secure boot, chain-of-trust design, and hardware Root-of-Trust implementation
- Hands-on experience with HSM/TPM/secure element integration, cryptographic key management (AES-128/256, RSA, ECC P-256/P-384), and hardware crypto accelerators
- Strong knowledge of TLS 1.2/1.3, mutual TLS, X.509 PKI, certificate lifecycle management, and secure communication protocol design for constrained devices
- Production experience with secure OTA update architectures: firmware signing, encrypted delivery, A/B partitioning, anti-rollback, and fleet-scale deployment
- Direct experience driving product-level compliance with the EU Cyber Resilience Act and/or RED Delegated Act (2022/30) — technical files, conformity assessment, and engagement with notified bodies/test labs
- Experience owning a vulnerability management/PSIRT function: CVSS scoring, CVE handling, coordinated disclosure, and remediation SLA management
- Experience managing third-party penetration testing engagements end to end, and engaging directly with external security researchers
- Proficiency in C/C++ for embedded systems — ARM Cortex-A (embedded Linux) and Cortex-M / 8051-class (bare-metal / RTOS) targets
- Experience with compiler and binary hardening: stack protectors, PIE/ASLR, RELRO, CFI, and static/dynamic analysis tooling
- Demonstrated ability to lead threat modeling exercises (STRIDE, attack trees) and translate findings into actionable architecture decisions
- Working knowledge of IoT/embedded security standards: IEC 62443, ETSI EN 303 645, EU Cyber Resilience Act (Regulation 2024/2847), NIST SP 800-183
- Strong cross-functional collaboration skills — ability to drive security outcomes across firmware, hardware, cloud, and product teams without direct authority
- Dice Id: 10336025
- Position Id: 9119899
- Posted 1 hour ago
Company Info
About TrustMinds, Inc.
TrustMinds, Inc. provides Information Technology recruitment and staffing services to organizations worldwide. Headquartered in Michigan; TrustMinds believes in partnering with clients to develop a strong sense of trust and confidence by working towards common goals and objectives. By applying the appropriate mix of people, process and technology, TrustMinds helps its clients achieve their technology and business objectives. Our goal is to work with our clients to help them achieve growth, success and discover opportunities to increase efficiencies, improve quality and reduce costs.
We cater to both permanent and contract staffing requests. We are experts in recruiting the best talent across different technologies and are helping organizations like yourselves in getting the right resources. We pride ourselves in discovering and recruiting the best suited candidates; from a technology, process and domain perspective; from across the industry. Our focus has been in recruiting local talent, thereby keeping the cost of hire in check for our clients. All our recruiters have over 10 years of experience in the industry and are locally based in the USA. Their understanding of the business domain, technology and organization fitment makes them recruit the best professionals from across the board.
We have been working with a very select group of clients; primarily large organizations; for whom we have become an extension of their talent acquisition arm. This has also led us to work very closely with them and give proper focus on their requirements.
We do not carry a bench; hence we will not be pushing our candidates for your requirements. We are expert recruiters who will take your requirements and recruit from the local market.
We look forward to discussing how we can help your organization fulfill its resourcing needs.