> Markdown version of [/jobs/ext/3853958-product-security-architect-remote](https://www.wearedevelopers.com/jobs/ext/3853958-product-security-architect-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Product Security Architect - Remote

- **Company:** TrustMinds, Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Software System Penetration Testing, ARM Architecture, C++ (Programming Language), Communications Protocols, Cyber Security, Computer Engineering, Dynamic Program Analysis, Linux on Embedded Systems, Firmware, Key Management, Public Key Infrastructure, X.509, Real-Time Operating Systems, RSA (Cryptosystem), Software Vulnerability Management, Software Security, Information Technology, Bare Metal, IoT Security
- **Published:** October 21, 2026
- **Apply:** https://www.dice.com/job-detail/1cbed238-91ae-4c5e-80d6-fc0414212a6e

## About the Role

* BE/BTech/MS/MTech in Computer Science, Electrical Engineering, Computer Engineering, or a related field
 * 12+ years of experience in product/embedded security, IoT security architecture, or security engineering for hardware products
 * Deep expertise in ARM security architecture: TrustZone (Cortex-A TEE/OP-TEE), TrustZone-M (Cortex-M), secure boot, chain-of-trust design, and hardware Root-of-Trust implementation
 * Hands-on experience with HSM/TPM/secure element integration, cryptographic key management (AES-128/256, RSA, ECC P-256/P-384), and hardware crypto accelerators
 * Strong knowledge of TLS 1.2/1.3, mutual TLS, X.509 PKI, certificate lifecycle management, and secure communication protocol design for constrained devices
 * Production experience with secure OTA update architectures: firmware signing, encrypted delivery, A/B partitioning, anti-rollback, and fleet-scale deployment
 * Direct experience driving product-level compliance with the EU Cyber Resilience Act and/or RED Delegated Act (2022/30) - technical files, conformity assessment, and engagement with notified bodies/test labs
 * Experience owning a vulnerability management/PSIRT function: CVSS scoring, CVE handling, coordinated disclosure, and remediation SLA management
 * Experience managing third-party penetration testing engagements end to end, and engaging directly with external security researchers
 * Proficiency in C/C++ for embedded systems - ARM Cortex-A (embedded Linux) and Cortex-M / 8051-class (bare-metal / RTOS) targets
 * Experience with compiler and binary hardening: stack protectors, PIE/ASLR, RELRO, CFI, and static/dynamic analysis tooling
 * Demonstrated ability to lead threat modeling exercises (STRIDE, attack trees) and translate findings into actionable architecture decisions
 * Working knowledge of IoT/embedded security standards: IEC 62443, ETSI EN 303 645, EU Cyber Resilience Act (Regulation 2024/2847), NIST SP 800-183
 * Strong cross-functional collaboration skills - ability to drive security outcomes across firmware, hardware, cloud, and product teams without direct authority

## Description

We are hiring a Product Security Architect to drive product security across Enphase's entire hardware portfolio - from silicon to cloud. This is a senior, hands-on role that owns the full lifecycle of product security: architecting and implementing security controls, driving compliance with regulations such as the EU Cyber Resilience Act (CRA) and the RED Delegated Act (2022/30), leading product security testing and certification efforts, running vulnerability management, and serving as the primary technical point of contact for external penetration testers and independent security researchers.