Norway Hybrid

AutoStore is hiring a Principal Security Engineer

About the Role

Shape the future of secure robotics systems as a Principal Security Engineer, where you'll serve as the technical leader for end-to-end product security. You'll define and operationalize security standards across hardware, firmware, and cloud software, ensuring robust protection in a high-growth, global automation environment.

What You’ll Do

  • Establish and maintain secure development practices by translating industry frameworks—such as OWASP, NIST SSDF, and IEC 62443—into practical, risk-based controls integrated into engineering processes.
  • Design and evolve a scalable, automated Secure SDLC that embeds security into every phase of development without slowing innovation.
  • Lead threat modeling and risk assessments, converting technical findings into clear, prioritized actions for engineering teams.
  • Define security architecture for cyber-physical systems, including secure boot mechanisms, device interfaces, and firmware integrity.
  • Drive compliance with standards including ISO 27001, SOC 2, CIS, and the Cyber Resilience Act, supporting audit readiness and certification efforts.
  • Implement and integrate security tooling—SAST, DAST, SCA, secret scanning, and firmware analysis—directly into CI/CD pipelines and developer workflows.
  • Develop security KPIs, review processes, and architectural guidelines while mentoring engineers and advising leadership on strategic security initiatives.

What We’re Looking For

  • Minimum of 10 years in technical security engineering with a focus on product security strategy.
  • Proven experience influencing security posture in product-centric organizations.
  • Experience engaging with executives, auditors, and external partners on security and compliance topics.
  • Hands-on familiarity with SOC 2, IEC 62443, ISO 27001, or similar compliance frameworks.
  • Ability to align security requirements with engineering speed and business goals.
  • Bachelor’s degree in Computer Science, Engineering, Robotics, or a related field.

Preferred Background

  • Experience in hardware security, robotics, or cyber-physical systems.

Work Environment

This role operates in a hybrid model with locations in Norway and the US, offering flexibility within a structured, collaborative framework. You'll join a stable, rapidly growing multinational that values innovation, inclusion, and employee well-being.

Benefits

  • One hour per week of paid time for physical activity
  • Comprehensive health insurance
  • Generous pension plan
  • Supportive, international culture that values diverse perspectives
  • Career development opportunities within a high-growth organization
Required Skills
OWASP ASVSOWASP SAMMNIST SSDFIEC 62443SASTDASTSCASecret scanningFirmware analysisCI/CD integrationProduct security strategySOC 2 complianceISO 27001Security posture improvementExecutive communication OWASP ASVSNIST SSDFIEC 62443ISO 27001SOC 2SASTCyber Resilience ActCISProduct SecurityComplianceSecurity StrategyRisk Management
Your first international client?

Don't lose them over invoicing

Clients ghost freelancers with unprofessional invoicing. Glopay gives you a real EU company partnership so they take you seriously from invoice #1.

Instant EU company partnership
Invoice builder with your branding
Automated payment reminders
Real-time payment tracking
Get EU company now
Ready in 24 hours
About company
AutoStore
AutoStore™ is a global technology company that uses advanced software to automate and orchestrate order fulfillment through robotics. The company’s systems are deployed in nearly 60 countries, helping brands achieve faster order delivery with minimal environmental impact by optimizing speed, efficiency, and floor space usage.
All jobs at AutoStore Visit website
Job Details
Category security
Posted a month ago