Security Architect / Product Security (m/w/d) – Stuttgart – CRA, Common Criteria, ISO 27001

Security Architect / Product Security (m/w/d) – Stuttgart – CRA, Common Criteria, ISO 27001

Location: Stuttgart, Baden-Württemberg, Germany (Hybrid)

Job type: Fixed-term, 24 months, full-time

Salary: EUR 84,000 – 110,000 per annum

Start: ASAP

Reference: 241

Senior Security Architect (m/w/d) for product security in Stuttgart. You’ll work on threat and risk analysis, Common Criteria, ISO 27001, BSI IT-Grundschutz, the CRA, NIS-2 and RED. The role is 24 months, pays €84k–€110k and needs you on site 2 days a week.

Security Architect / Product Security Specialist (m/w/d) – Stuttgart, Hybrid

Xcede is recruiting a senior Security Architect for a global technology group working in test and measurement, secure communications and cybersecurity. You’ll join their product security team in Stuttgart and build security into products from the design stage through to certification.

The role

• Contract: 24 months, fixed term, 40 hours a week, starting ASAP
• Salary: €84,000 – €110,000 a year
• Working pattern: hybrid, at least 2 days a week on site in Stuttgart

What you’ll do

• Own product security architecture across hardware, firmware, software and embedded devices
• Build secure product development (SDL / secure-by-design) into the engineering lifecycle
• Lead threat modelling and threat and risk analysis (TARA)
• Drive Common Criteria evaluations and certifications, working with evaluation labs and the BSI
• Keep products aligned with ISO/IEC 27001 and BSI IT-Grundschutz
• Put Cyber Resilience Act (CRA) , NIS-2 and Radio Equipment Directive (RED) / EN 18031 requirements into practice

What you’ll bring

• Senior experience in product security , security architecture or embedded security
• Hands‑on experience of secure development processes , for example IEC 62443-4-1
• Practical experience of Common Criteria or a similar security certification
• Working knowledge of ISO 27001 and BSI IT-Grundschutz
• Practical exposure to CRA, NIS-2 and RED cybersecurity compliance
• Business‑fluent German and English preferred

Nice to have: IEC 62443, ETSI EN 303 645, PKI or secure boot, CISSP, CSSLP, ISO 27001 Lead Auditor, and eligibility for German security clearance (Sicherheitsüberprüfung).

Keywords: Security Architect, Product Security Architect, Sicherheitsarchitekt, Produktsicherheit, IT-Sicherheitsarchitekt, Embedded Security, Cyber Security Architect, Common Criteria, ISO 27001, BSI IT-Grundschutz, Cyber Resilience Act, CRA, NIS-2, NIS2, RED, EN 18031, IEC 62443, Threat Modelling, TARA, Security by Design, Stuttgart, Baden-Württemberg