Are you interested in product security and "capturing flags"? Do you like to work in Linux? Join us as a Product Security Engineer in our software solutions team!

Westermo is known for our robust data communication products. To us, quality is everything and we are proud to be creating our market leading products – both hardware and software – on our own. At Westermo, we have developed our own Linux based Operating System with quality and robustness in mind for our network products; WeOS. As our commitment on security is growing, we are ISO27001 & IEC 62443-4-1 certified, and as part of this commitment, we are now looking for a Product Security Engineer in R&D to handle the next level of customer expectations within this fast-moving area.

Are you our new Product Security Engineer?

At Westermo we develop software for our hardware products – routers and switches – with tough system resource constraints. As Product Security Engineer of our networking products, you will be working with hands-on-security in all parts of the Westermo SDLC (Secure Development Lifecycle) domain, such as threat, risk, and vulnerability management, including assisting developers with requirements, design and threat modeling. Within vulnerability management, you will be lead member of our PSIRT (Product Security Incident Response Team), including handling vulnerabilities from intake to disclosure.

You will work closely with software developers, CSPO (Cyber Security Product Owner), testers and stakeholders. At Westermo there is always room for initiative and creativity. In addition to the defined role, we look forward to you contributing with ideas of improvements to our processes, guidelines and tools. If you like to try ideas, develop new solutions, solve problems and develop for the future - then Westermo is the place for you to grow!

So, who are we looking for?

We are looking for someone who is eager to work with security in everything that concerns our products. For this role, you need to have knowledge within security related product development in the Linux and Embedded Systems domain. You have a deep understanding of how different hardware architecture affects the software from a security perspective. You may have previous experience as a Pen-Tester, as a member in PSIRT or as a security architect/designer/programmer. You are consistent and punctual in writing to meet our high standards in disclosing vulnerabilities. Besides your interest in the area, you also have some experience, for instance in taking courses or written a thesis work or are into "Capture The Flag" competitions.

Requirements:

• Experience from working in product development SDLC 
• Experience as Pen-Tester or PSIRT analyst, security architect/designer/programmer/developer or similar.
• Experience in Embedded Systems.
• Skilled Linux-user.
• Experience in C-programming.
• Fluent in English, and at least moderate in Swedish, spoken and written.
• Leadership experience is meritorious 

Oh, and don't worry, if you’re not an expert in all the things described – you'll learn

In return, we offer: You will be working at the forefront of technology in a friendly, open culture where we you get the opportunity to learn from skilled colleagues every day. A mature and caring leadership in a flat organization. Through our collective bargain agreement you will be covered in terms of insurance, pension and other benefits. We like to have fun together and we regularly enjoy sports and other social activities as a team. We believe that magic happens when people meet. We are a learning organization and we truly love to try new things, think outside the box and be innovative together!

Basic information:

• Location: Kopparlunden, Västerås
• Job type: Full time
• Employment contract: Permanent

Don’t miss out on this opportunity – apply today. For further information please contact:

Manager Fredrik Linder at fredrik.linder@westermo.com Elin Sandell, Recruiter at elin.sandell@westermo.com

Robust industrial data communications - Made easy

Welcome to a rapidly growing international company, thriving at the forefront of cutting edge technology. Westermo develops and manufactures advanced devices for industrial data communication, used in mission critical installations and harsh industrial environments. The very robust and secure communication networks built with our products provide a high value for our customers.

We are passionate about taking advantage of the growth opportunities in our market. The work environment is very dynamic with great loyalty and team spirit. It is expected to take initiative and our flat organization creates efficiency and provides the opportunity for those who are closest to the task of solving it.

Westermo is a leading supplier of Industrial Data Communications equipment to the World market. Sales are conducted through our own offices in key markets in Europe, North America, Australia and Asia, as well as through distributors and OEM customers worldwide. Development and manufacturing take place in Sweden, Ireland and Switzerland. Westermo was founded in 1975 and has today more than 300 employees with a turnover around 800 MSEK. The company is a wholly owned subsidiary of Beijer Electronics AB, listed on the stock exchange.