CRA Compliance & Product Security Engineer - Remote in Mexico

About the role

We are looking for a CRA Compliance & Product Security Engineer to help our organization meet the European Cyber Resilience Act (CRA) requirements while enhancing product security throughout the product lifecycle. This remote position is based in Mexico and works closely with engineering, product, legal, and security teams.

Key responsibilities

• Assess products and development processes against CRA requirements and identify compliance gaps.
• Translate regulatory requirements into concrete product security requirements and engineering controls.
• Support vulnerability management, including CVE identification, risk assessment, remediation tracking, and reporting.
• Contribute to Secure SDLC activities such as threat modeling, security testing, and risk assessments.
• Prepare and maintain security/compliance documentation and technical evidence.
• Collaborate with cross‑functional teams to ensure security and compliance are embedded throughout the product lifecycle.
• Monitor changes in cybersecurity regulations and standards and evaluate their impact on products and processes.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or a related field.
• At least 3 years of experience in product security, cybersecurity, compliance, or secure software engineering.
• Strong understanding of the EU Cyber Resilience Act and related frameworks such as NIS2.
• Proven ability to work cross‑functionally with engineering, product, QA, legal, and compliance teams.

Required skills

• Product security and Secure SDLC
• CVE and vulnerability management
• Threat and risk assessment
• Security testing and remediation tracking
• Cryptography, secure data erasure, authentication, access control, and secure communications

What we offer

• Full‑time permanent contract
• Remote work arrangement
• Opportunity to shape security practices for a leading IT company in Latin America