Overview
We are seeking a Senior Cyber Security Engineer (Assurance) to join a leading organization in the rail and logistics sector. This hybrid role will focus on specifying, leading, and consulting on cyber security activities within an Operational Technology environment. The successful candidate will collaborate with various teams throughout the engineering lifecycle to ensure the delivery of secure and compliant rail signaling and control systems.
Responsibilities
- Engage with clients’ security teams to understand their security strategy.
- Specify and maintain security requirements for projects.
- Support compliance with international and regional security standards (NIS, NIS2, EU CRA, IEC62443, TS 50701).
- Create and monitor Cyber Security Management Plans.
- Develop security architectures and identify necessary security controls.
- Plan and execute threat and risk analysis, defining countermeasures.
- Evaluate third-party components against security requirements.
- Conduct verification and validation of security implementations including penetration testing.
Requirements
- Educated to degree level (or equivalent) in an engineering, scientific or numerate discipline.
- Proven experience in security engineering in Operational Technology environments.
- Practical experience with IEC 62443 standard series and CENELEC standards.
- Preferably hold certifications such as CISSP, CSSLP, or CCP.
- Experience in mentoring and developing engineers.
- Excellent communication skills with the ability to influence stakeholders.