Software Security Designer – Cyber Resilience Act​/IEC

At Sioux Technologies, cybersecurity is rapidly becoming a core engineering discipline. Rather than treating security as an afterthought, we help our customers design cyber-resilient products from the earliest system concepts onward.

In this role you help our customers develop cyber-resilient high-tech products that comply with the latest European cybersecurity legislation and industrial security standards.

You work on complex systems in the semiconductor, medical, analytical instrumentation and industrial automation domains, translating cybersecurity requirements into practical software solutions.

What excites you as a Software Security Designer – Cyber Resilience Act / IEC?

From any Sioux office in the Netherlands, you will work in mono-disciplinary and multidisciplinary teams to design, implement and validate secure software that meets regulatory requirements and industry-standard security frameworks.

• Translating a security architecture into software design
• Performing software security design reviews and implementing secure-by-design principles.
• Supporting threat modelling (STRIDE, OWASP, attack trees, misuse cases).
• Performing cybersecurity risk assessments and defining security requirements for embedded and application software.
• Implementing authentication, authorization, encryption and secure communication.
• Improving software supply chain security (SBOMs, dependency management, vulnerability management).
• Developing CRA and IEC 62443 compliant software.

Sounds good so far? We’d love to tell you more…..

You combine extensive software engineering experience with deep knowledge of secure product development, helping customers implement security throughout the entire software lifecycle.

• A Bachelor's or Master's degree in Computer Science, Embedded Systems, or a related technical field.
• More than 7 years of experience in software development (C++, C#, Java, and/or embedded software) within the medical technology, semiconductor, analytical instrumentation, and/or industrial automation industries.
• Demonstrable experience in implementing security requirements for products subject to one or more of the following regulations: CRA, NIS2, and AIA.
• Experience with one or more of the following security standards: IEC 62443, IEC 81001, and ISO/IEC 27001.
• Experience with threat modeling and vulnerability management (CVE, CVSS, PSIRT).
• Experience generating Software Bills of Materials (SBOMs) and securing the software supply chain.
• Experience with secure coding guidelines (such as CERT, MISRA, and OWASP) and working in Agile, Dev Ops, and Dev Sec Ops  environments.

• Flexible 32-40 hour working week, with room to work from home.
• A healthy work-life balance is very important to us. We have 28 holidays with an option to acquire an additional 12 holidays.
• You will work with passionate colleagues who share your drive for technology and business success.
• By combining our expertise in software, electronics, mechanics, mechatronics, mathematics and assembly, we make the impossible possible for our customers and get to work on challenging high-tech projects.
• You get a lot of freedom and responsibility; after all, you know exactly what you are doing.
• Personal coaching and a training budget of €6000 per year, so that you can continue to develop yourself.
• We also find it important to have fun together. We organize a lot for our employees, from family festivals and sparkling Christmas parties, to inspiring knowledge sessions for the high-tech community.
• You will be working at a prime location in the heart of the Brainport region. You will be working on the Sioux Campus and can use…