Product Security Specialist

About Us

Generative Bionics is a deep-tech company building humanoid robot platforms to deploy human-centered Physical AI. We design intelligent, capable machines that work alongside people in real-world environments — developed in Genova, Italy.

Role

The Product Security Engineer will strength the security of our products and ensure that cybersecurity is embedded throughout the entire product lifecycle.The role will contribute to the development of secure products by integrating security-by-design principles into hardware, software, embedded systems, AI-enabled capabilities, cloud-connected services, and supporting platforms. Working closely with engineering, product management, quality, and technology teams, the successful candidate will help identify and mitigate cybersecurity risks before products reach customers and throughout their operational lifecycle.The Product Security Engineer will play a key role in secure product development, threat modeling, vulnerability management, security validation, and regulatory product cybersecurity activities, ensuring that security requirements are effectively integrated into product design, development, testing, release, and post-market activities.The role will also support compliance and product assurance initiatives by collaborating with Information Security GRC Specialists, ICT Security Engineers, and engineering teams to align product cybersecurity activities with applicable regulations, standards, and industry best practices.

Responsibilities

• Define, maintain, and promote product cybersecurity requirements throughout the product lifecycle;
• Support the adoption and continuous improvement of Secure Development Lifecycle (SDLC) practices across product development teams;
• Perform threat modeling, attack surface analysis, abuse case analysis, and product security risk assessments;
• Collaborate with engineering teams to integrate security-by-design principles into software, hardware, embedded, AI, cloud-connected, and robotics products;
• Review product architectures and technical designs to identify cybersecurity risks and recommend appropriate mitigations;
• Support secure coding initiatives and provide security guidance to development teams;
• Coordinate product security testing activities, including vulnerability assessments, security reviews, and penetration testing initiatives;
• Support vulnerability management activities, including identification, triage, tracking, remediation, and verification of product security vulnerabilities;
• Contribute to Software Bill of Materials (SBOM) processes and support third-party component security reviews;
• Assess security risks associated with open-source software, commercial software components, and external dependencies;
• Support and coordinated vulnerability handling activities;
• Contribute to post-market cybersecurity monitoring and product security incident investigations- Support the development and maintenance of product cybersecurity documentation, security requirements, risk assessments, and security evidence;;
• Collaborate with quality, safety, compliance, engineering, and product teams to ensure cybersecurity requirements are addressed consistently;
• Support compliance activities related to the Cyber Resilience Act (CRA), EU AI Act, IEC 62443, and other applicable product cybersecurity requirements;
• Stay informed about emerging threats, vulnerabilities, attack techniques, and product security best practices relevant to robotics, AI, embedded systems, and connected products;

Requirements

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, Electrical Engineering, Robotics, or a related technical discipline;
• Minimum 3 years of experience in Product Security, Application Security, Embedded Security, Security Engineering, IoT Security, Industrial Cybersecurity, or related technical cybersecurity roles;
• Strong understanding of Security-by-Design and Secure Development Lifecycle (SDLC) principles;
• Experience performing threat modeling, product risk assessments, and security architecture reviews;
• Knowledge of application security, secure coding principles, and common software vulnerabilities;
• Understanding of product cybersecurity concepts for connected devices, embedded systems, and cyber-physical products;
• Familiarity with vulnerability management processes and remediation tracking;
• Knowledge of OWASP Top 10, OWASP ASVS, and secure software development practices;
• Understanding of Linux security concepts and system hardening techniques;
• Familiarity with cloud-connected product architectures and associated cybersecurity risks;
• Understanding of authentication, authorization, cryptography, a