Product Security & Compliance Engineer

About the role

Nabu Casa is seeking a full‑time Product Security & Compliance Engineer to ensure its connected hardware and cloud services are secure, resilient, and meet regulatory requirements. You will work at the intersection of product security engineering and cybersecurity compliance, supporting the growth of the Home Assistant ecosystem.

Key responsibilities

• Own cybersecurity aspects of regulatory compliance for connected hardware, including EU RED and EN 18031 requirements.
• Prepare products and processes for the EU Cyber Resilience Act, covering vulnerability handling, security updates, SBOMs, support periods, and incident reporting.
• Develop threat models, perform security validation, and manage vulnerability and software‑supply‑chain risks.
• Create and maintain architecture and data‑flow diagrams for devices, firmware, networking, and cloud services.
• Produce evidence and documentation required for product conformity and certification.

Required profile

• Strong technical foundation in cybersecurity and a willingness to learn evolving regulatory standards.
• Ability to work across engineering and compliance teams, taking ownership of security deliverables.
• Comfort with interpreting technical requirements and translating them into actionable product designs.

Required skills

• Threat modeling
• Vulnerability management
• Software supply‑chain risk management
• SBOM creation
• Firmware, networking, and cloud service security

What we offer

• Opportunity to shape security for a leading open‑source smart‑home platform.
• Collaborative environment with a profit‑driven, user‑focused company.
• Competitive compensation and benefits.