Cybersecurity Engineer

About the role

Gravis Robotics is building autonomous solutions for heavy construction equipment. As a Cybersecurity Engineer you will be responsible for securing the entire product lifecycle, from the embedded software inside the Rooftop Autonomous Control Kit (RACK) to the cloud services and supply‑chain processes.

Key responsibilities

• Lead EU Cyber Resilience Act (CRA) readiness, including product classification, gap analysis, risk assessment and remediation planning.
• Translate CRA, NIS2 and Machinery Regulation requirements into concrete control frameworks aligned with ISO 27001/27002, NIST CSF, NIST SP 800‑161, NIST SSDF, CIS Controls and OWASP.
• Establish and mature product security capabilities: secure development lifecycle, secure update mechanisms, vulnerability handling, coordinated disclosure (CVD), PSIRT operations and SBOM generation.
• Conduct threat modelling and risk assessments for products and suppliers, define mitigation strategies and KPI dashboards.
• Write secure code for critical components in C, C++, Python and/or Rust, and perform manual and automated code reviews focused on OWASP Top 10 and CWE findings.
• Maintain technical documentation for conformity assessments, CE marking and interactions with Notified Bodies.

Required profile

• Proven experience in product security for embedded and cloud environments.
• Deep knowledge of EU cybersecurity regulations (CRA, NIS2) and international standards (ISO 27001, NIST, CIS).
• Ability to work cross‑functionally with engineering, legal, product and operations teams.

Required skills

• C, C++, Python, Rust programming languages.
• OWASP Top 10, CWE vulnerability taxonomy.
• ISO 27001/27002, NIST CSF, NIST SP 800‑161, NIST SSDF.
• CIS Controls, SBOM management, PSIRT processes.
• Threat modelling, risk analysis, secure coding practices.

What we offer

• Opportunity to shape the security function of a fast‑growing robotics startup.
• Collaborative environment at the intersection of hardware, software and real‑world deployment.
• Access to cutting‑edge robotics technology and international industry partners.