Overview
The Cyber Security Engineer will join a global security technology manufacturer on a contract basis, primarily working from a remote location in the UK with occasional site visits. This role focuses on ensuring compliance with the EU Cyber Resilience Act and enhancing product security through collaboration with various engineering and product management teams. The contractor will play a key role in assessing products, defining security requirements, and supporting the implementation of security measures.
Responsibilities
- Assess products against cybersecurity standards and regulations.
- Collaborate with engineering and product teams to close compliance gaps.
- Define security requirements and establish engineering gates for product security.
- Help select and implement SBOM tooling while reviewing third-party components.
- Support customer security questionnaires and assist in regulatory audits.
- Produce clear technical security documentation and communicate effectively with stakeholders.
- Contribute to the development of a sustainable Product Security programme.
- Conduct readiness assessments for the EU Cyber Resilience Act.
Requirements
- Proven experience in assessing cybersecurity products for compliance.
- Familiarity with the EU Cyber Resilience Act and related standards (NIST 800-53, IEC 62443).
- Strong understanding of secure-by-design principles and the Secure Software Development Lifecycle.
- Experience in software development and vulnerability management processes.
- Ability to produce clear technical documentation.
- Strong stakeholder management and communication skills.
- Experience with OT/ICS, PLC, and HMI systems is a plus.
- Familiarity with SAST, SCA, and SBOM tooling is highly desirable.