security product engineer
We're preparing a cloud platform for IEC 62443-4-1 certification and we're looking for someone to lead its product security — from threat modeling through design review all the way to verification. You'll build the SDL processes from scratch and have the mandate to substantively challenge architectural decisions. You don't need to know the IEC 62443 standard — what matters to us is experience with product security; you'll get up to speed on 62443 along the way.
10.000- 11.000 Kč/manday
Senior
Freelance/Part-time
Onsite/Remote
What Will Be Your Job
Threat modeling (STRIDE) and defining security requirements with traceability in JIRA
Security design review of the product architecture and preparation of the Security Concept
Coordinating verification activities — security requirements testing, threat mitigation testing, vulnerability testing, penetration testing
Code review process for security-critical parts of the code, SBOM and supply chain security (Dependency Track)
Running PSIRT, patch management and security advisories toward customers
SDL governance, training the team and preparing the product for the IEC 62443-4-1 certification audit
who we´re looking for
Experience defining and managing security requirements throughout software development (SDL, secure SDLC or a similar framework)
Practical knowledge of web application security (OWASP Top 10, authentication, authorization, cryptography)
Ability to communicate security topics clearly to both developers and management
WHAT WILL EARN YOU EXTRA POINTS
Knowledge of IEC 62443 (esp. 4-1 and 4-2) or experience with OT/ICS/IIoT environments
Experience with vulnerability management, CVE triage and penetration testing
Experience compiling SDL certification documentation
Knowledge of SBOM tools (Dependency Track, Syft, Grype) and DAST tools (OWASP ZAP, Burp Suite)
Experience implementing PSIRT, knowledge of NIS2 / Cyber Resilience Act, ISO/IEC 27017
Interested? Send us your CV and let’s talk! :)
What Your Future Colleagues Say about ARTIN
I'm constantly switching between different projects, learning new technologies, and facing fresh challenges. That's what keeps my developer brain happy. I’d get bored doing the same thing over and over.
JAROSLAV MÜLLER
Senior Developer & Solution Architect
We have a refreshing approach to work culture. There's no status-chasing or bureaucratic red tape to cut through. Need a software license? No endless approval chains—just a simple conversation. Want to try a new way of doing things? We'll find a way that works for both sides.
JIRI MINX
Senior Developer & Consultant
Benefits—Our Way of Saying Thanks
Your time is yours
Unlimited vacation—because we trust you to manage your time
Sick days, no questions asked
A flexible approach to work-life balance
Tech that makes sense
Modern tech stack that keeps you marketable
Tools that help your work easier, not harder
Infrastructure built by developers, for developers
Grow with us
Cutting edge tech stack
Regular tech meetups to stay sharp
Work where you feel best
A remote-friendly approach
DevHubs in Brno, Prague, and Bratislava for in-person cooperation
Access to coworking spaces worldwide
Comfortable offices in our own building
Community matters
Team-building events that you'll actually want to attend
A chance to work with people who share your passion for tech
Help us grow with referral bonuses (because great people know great people)
Care About Your Wellbeing
Paid telehealth platform uLékaře.cz for you and your loved ones
A company mobile phone plan (because nobody likes managing multiple phones)
Pet-friendly environment (because sometimes the best rubber-duck debugging involves an actual furry friend)