Senior Systems Engineer - Product Security (m/f/d)

Fernride is building the future of autonomous logistics by combining advanced automation technology with human‑guided teleoperations. We enable logistics companies to transition toward safer, more efficient, and more sustainable driverless operations. With strong expertise in robotics, AI, and automotive engineering, Fernride delivers scalable solutions that bring real‑world autonomy to industrial environments.

The Quantum Systems Land Domain is developing leading-edge autonomous UGV technology for defense — a domain where no blueprint exists. The product strategy starts with a UGV that is useful on today’s battlefields and can be built with current technology, then progressively increases the authority of the autonomy system while reducing the need for human supervision — across ever more complex operating environments, up to fully autonomous operation in proximity to civilians.

As a senior cybersecurity expert, you will own and shape product security from the ground up: define the threat landscape, build the security processes, and drive defense-in-depth across the platform. You will work closely with system safety engineers, design assurance, hardware/software engineering teams, and V&V to ensure cybersecurity is embedded across the full product lifecycle. As the product matures, you will grow your domain into a team.

What is your Day to Day Mission:

• Design Assurance – Sicherstellen, dass sicherheits- und sicherheitsrelevante Funktionen korrekt in Hardware, Software und ML umgesetzt werden.

• Safety & Threat Analysis – Durchführung von FMEA/FMECA, Risikoanalysen und TARA zur Identifikation von Fehlermodi, Bedrohungen und Angriffspfaden.

• Technical Architecture – Mitgestaltung der technischen Architektur inkl. Safety‑Mechanismen, Security Controls, Trust Boundaries und Safe‑State‑Strategien.

• Requirements Management – Pflege der Systemanforderungen mit vollständiger Traceability für Safety, Security und Compliance.

• Verification & Validation – Definition von Testkriterien, Fault‑Injection‑ und Penetration‑Test‑Scopes; Review von V&V‑Nachweisen.

• Compliance – Unterstützung bei regulatorischen Anforderungen (z. B. LVD, EMC, CRA, RED‑Security, AI‑Act‑Security) und Pflege relevanter Dokumentation.

• Supply Chain Security – Bewertung von Drittanbieter‑Komponenten, SBOM‑Pflege und sichere Beschaffungsanforderungen.

• Operational Measures – Definition von Incident Response, Monitoring, Patch‑Management und Schlüsselverwaltung.

• Cross‑Functional Collaboration – Enge Zusammenarbeit mit System Safety, Product Security, Design Assurance und Engineering‑Teams.

• Implementation Guidance – Übersetzung von Safety‑ und Security‑Maßnahmen in konkrete technische Vorgaben; Review von Designs auf Fehlermodi und Angriffsflächen.

• AI‑Assisted Workflows – Entwicklung KI‑gestützter Prozesse für Analyse, Traceability und Compliance.