SENIOR CYBERSECURITY ARCHITECT

END-TO-END ROBOTICS PLATFORM

Join our engineering team to advance robotics technology.

LOCATION

Viseu, Portugal

EMPLOYMENT TYPE

PERMANET

What You'll Do

In this role, you will define and implement the overarching security strategy across our entire technology stack, spanning frontend interfaces, cloud backends, DevOps pipelines, edge AI compute modules and the robots themselves. As the principal security voice, you will drive the technical direction of our threat mitigation strategies, establish robust security architectures, and elevate the security posture of the wider engineering group to protect mission-critical operations. This is a hands-on architecture-and-implementation role: you will be building and deploying real security controls on real systems, not solely producing policy or compliance documentation.

KEY RESPONSABILITIES

You will contribute to a broad and exciting set of responsibilities, including:

End-to-End Platform Security

Design and integrate robust security protocols across the entire ecosystem, ensuring robust Application Security (AppSec) for our frontends and cloud-based backends.

Communication & Data Protection

Architect highly secure, encrypted communication channels (e.g., mTLS, secure WebSockets) to protect real-time telemetry, video streaming, and remote command execution between the cloud infrastructure and the robot fleet.

Edge AI & Hardware Security

Implement physical and firmware-level security measures on the robots themselves, utilizing hardware-backed security (e.g., TPM, Secure Boot) to protect edge AI computation and prevent unauthorized access or tampering.

DevSecOps & Threat Management

Integrate automated security scanning (SAST/DAST) into CI/CD pipelines, rigorously manage third-party dependency risks, and foster a security-first engineering culture by conducting architectural reviews and establishing coding standards for the broader development organization.

Industrial Compliance & Standard Enforcement

Define, implement, and enforce compliance with global cybersecurity, operational technology (OT), and industrial automation standards, most likely including the EU AI Act and the EU Machinery Regulation [to be confirmed with legal counsel], ensuring cyber-physical security aligns with international machinery safety, data protection, and emerging AI regulations.

REQUIRED QUALIFICATIONS

Education & Experience

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Security, or a related field (industry certifications such as CISSP, CISM, or cloud-specific security credentials are a strong plus).
Experience: 5+ years of experience engineering security solutions across complex distributed systems, IoT environments or robotics platforms, with a demonstrated ability to architect secure systems that serve as the standard for wider engineering efforts

Technical Skills

Compliance & OT Security: Deep knowledge of OT security principles and an understanding of the critical intersection between cybersecurity and physical machinery safety. Proven ability to research, interpret, and implement complex industrial and regulatory standards as they apply to novel robotic deployments.
Cloud & DevSecOps: Deep expertise in cloud infrastructure security, container security orchestration, and supply chain/dependency vulnerability management.
Network & IoT Security: Strong foundation in modern cryptography, Zero Trust network architectures, Identity and Access Management (OAuth/OIDC), and practical experience securing physical edge devices and embedded Linux systems.

Mindset & Soft Skills

Excellent problem-solving, debugging and analytical skills.
Ability to work autonomously while collaborating effectively in a multidisciplinary team.
Curiosity, creativity and a drive to push boundaries in robotics.

In addition to technical skills, we value individuals who are team players, effective communicators, and problem solvers. If you are ready to take on new challenges and drive innovation in the field of robotics, we want to hear from you.

WHO IS THIS ROLE FOR

You've architected and implemented security controls across a full stack, frontend to firmware, not just one layer of it.
You're comfortable being the sole security voice on a small team, setting standards other engineers follow, not one specialist among many on a large security team.
You're genuinely interested in the compliance and regulatory side of cyber-physical systems, not just technical implementation.

Who This Role Is Not Primarily For

This role is not primarily a general software engineering position (see the Full-Stack Engineer role for that), nor is it a compliance-only or audit-only position without hands-on implementation experience. Candidates whose experience is purely policy or paperwork-based, without architecting and deploying real security controls, are unlikely to be the right fit.

LOCATION, WORKING MODEL & PRATICAL DETAILS

Location: Viseu, Portugal. On-site, Monday–Friday, with a genuine flexible-hours culture (no time-tracking). Remote considered only case-by-case for exceptional candidates.
Visa: EU/EEA candidates only at this time; unable to sponsor visas outside the EU.
Language: English required; team is transitioning to full-English operation.
Relocation: Practical support available (visa guidance, help finding accommodation, contract translation); does not cover flights or full relocation costs.

How to Apply

If you'd like to join us, send your CV and any relevant links (GitHub, project videos, publications, portfolio)

to careers@evoworkforce.com

APPLY NOW