About the Position

Product Security Specialist

Generative Bionics is a deep-tech company building humanoid robot platforms to deploy human-centered Physical AI. We design intelligent, capable machines that work alongside people in real-world environments - developed in Genova, Italy.

About Us

Responsibilities

Define, maintain, and promote product cybersecurity requirements throughout the product lifecycle;
Support the adoption and continuous improvement of Secure Development Lifecycle (SDLC) practices across product development teams;
Perform threat modeling, attack surface analysis, abuse case analysis, and product security risk assessments;
Collaborate with engineering teams to integrate security-by-design principles into software, hardware, embedded, AI, cloud-connected, and robotics products;
Review product architectures and technical designs to identify cybersecurity risks and recommend appropriate mitigations;
Support secure coding initiatives and provide security guidance to development teams;
Coordinate product security testing activities, including vulnerability assessments, security reviews, and penetration testing initiatives;
Support vulnerability management activities, including identification, triage, tracking, remediation, and verification of product security vulnerabilities;
Contribute to Software Bill of Materials (SBOM) processes and support third-party component security reviews;
Assess security risks associated with open-source software, commercial software components, and external dependencies;
Support and coordinate vulnerability handling activities;
Contribute to post-market cybersecurity monitoring and product security incident investigations;
Support the development and maintenance of product cybersecurity documentation, security requirements, risk assessments, and security evidence;
Collaborate with quality, safety, compliance, engineering, and product teams to ensure cybersecurity requirements are addressed consistently;
Support compliance activities related to the Cyber Resilience Act (CRA), EU AI Act, IEC 62443, and other applicable product cybersecurity requirements;
Stay informed about emerging threats, vulnerabilities, attack techniques, and product security best practices relevant to robotics, AI, embedded systems, and connected products;

Requirements

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, Electrical Engineering, Robotics, or a related technical discipline;
Minimum 3 years of experience in Product Security, Application Security, Embedded Security, Security Engineering, IoT Security, Industrial Cybersecurity, or related technical cybersecurity roles;
Strong understanding of Security-by-Design and Secure Development Lifecycle (SDLC) principles;
Experience performing threat modeling, product risk assessments, and security architecture reviews;
Knowledge of application security, secure coding principles, and common software vulnerabilities;
Understanding of product cybersecurity concepts for connected devices, embedded systems, and cyber-physical products;
Familiarity with vulnerability management processes and remediation tracking;
Knowledge of OWASP Top 10, OWASP ASVS, and secure software development practices;
Understanding of Linux security concepts and system hardening techniques;
Familiarity with cloud-connected product architectures and associated cybersecurity risks;
Understanding of authentication, authorization, cryptography, and secure communications principles;
Knowledge of software supply-chain security concepts and third-party component risk management;
Ability to analyze complex technical systems and identify security weaknesses;
Strong analytical, organizational, and documentation skills;
Strong communication skills and ability to collaborate effectively across engineering, product, quality, and business teams;
Professional proficiency in English;
High standards of integrity, accountability, confidentiality, and professional judgment;
Availability to travel nationally and internationally is expected;

Valued Extras

Experience in robotics, autonomous systems, humanoid robotics, industrial automation, IoT, or cyber-physical systems;
Experience with embedded Linux environments and secure firmware development;
Experience securing AI-enabled products and machine learning systems;
Experience with Software Bill of Materials (SBOM) generation and management;
Familiarity with penetration testing methodologies and security validation techniques;
Experience working within DevSecOps environments;
Familiarity with industrial cybersecurity principles and IEC 62443;
Certified Secure Software Lifecycle Professional (CSSLP);
GIAC Defensible Security Architecture (GDSA);
GIAC Response and Industrial Defense (GRID);
Offensive Security certifications or equivalent;

We Offer

The opportunity to help build one of Europe's most ambitious humanoid robotics companies;
Work on cutting-edge technologies at the intersection of AI, robotics, software, electronics, and manufacturing;
A collaborative, multidisciplinary, and fast-paced, high-growth innovation-driven environment;
Direct exposure to strategic programs with tangible impact on product development and company growth;
Concrete opportunities for professional development and career advancement;
Competitive compensation aligned with experience;

Disclaimer

We are proud to be an Equal Opportunity Employer. We evaluate all qualified applicants solely on the basis of merit and business needs, without distinction or discrimination based on gender, race, color, ethnic or social origin, age, religion, sexual orientation, gender identity, disability, or any other characteristic protected by law.

Product Security Specialist

Job description