Senior Cybersecurity Engineer – Remote (Portugal)

About the role

We are seeking a Senior Cybersecurity Engineer with a strong offensive mindset to join a cutting‑edge project focused on the security of embedded and IoT systems within the automotive sector. The role is fully remote based in Portugal, with occasional travel to a client site in Luxembourg.

Key responsibilities

• Identify vulnerabilities and attack paths across embedded and connected devices.
• Analyse firmware, hardware, and communication layers for security weaknesses.
• Perform Threat Analysis and Risk Assessment (TARA) aligned with ISO 27005.
• Define threat scenarios, assess risks, and propose mitigation strategies.
• Evaluate system architecture, including physical attack vectors.
• Collaborate with cross‑functional teams to design and implement secure solutions.

Required profile

• Proven experience in cybersecurity, embedded systems, or IoT security.
• Strong offensive security mindset and hands‑on experience with vulnerability analysis.
• Ability to work independently and communicate findings to technical and non‑technical stakeholders.

Required skills

• Embedded architectures and firmware analysis
• Hardware interfaces (ARM, JTAG, SWD, SPI, I2C)
• Network protocols (Ethernet, TCP/IP, UDP)
• Vulnerability analysis and attack surface identification
• Threat Analysis and Risk Assessment (TARA) – ISO 27005
• Familiarity with ASPICE 4.0 and ISO 26262 (nice to have)