Senior Engineer (Cybersecurity)

About the role

We currently have an opportunity for a Senior or Principal Cyber Security Engineer to join our growing Cyber Security team within our Systems Engineering and Assurance discipline. This position will suit a committed and ambitious professional who can demonstrate strong leadership and interpersonal skills combined with commercial awareness and the ability to play their part in growing a dynamic high-performance team.

Responsibilities

• Support the Team Lead (Cybersecurity and software assurance) in delivering cybersecurity solutions to our rail & infrastructure clients, on projects from the Concept phase up to the Operation and Maintenance Phase.
• Manage cybersecurity governance and lifecycle activities, actively contributing to the creation of relevant evidence.
• Assist the Team Lead in cybersecurity strategy definition.
• Maintain good working relationships with clients, ensuring their requirements are fulfilled.
• Adapt to design challenges and find workable solutions considering quality, cost, and other disciplines.
• Ensure compliance with all relevant cybersecurity standards throughout the process, liaising with other disciplines and cybersecurity engineers to resolve issues.
• Support the management of Cybersecurity schedules and deliverables.
• Attend standards briefings and assist the Team Lead as required.
• Liaise with clients to effectively communicate their requirements to the team.
• Review deliverables, including technical documents and reports, and assist in preparing expressions of interest and tenders.

Requirements

• BSc in Cybersecurity, Computer Science, Computer Science Engineering, or similar.
• At least 3 years’ experience in OT cyber security and cyber security risk management.
• Ability to independently define and manage cyber security strategy/planning and establish OT cyber security governance.
• Experience in Threat Identification and Cyber Security Risk Management (Analysis and Assessment) for complex systems.
• Working knowledge of major OT cyber security standards (including IEC 62443 series).
• Ability to support supply chain management and perform cyber security audits.
• Experience producing Zones and Conduits Partitioning Diagrams, defining Cyber Security Requirements, and cyber security Assurance.
• Knowledge of ISO 27005, NIST 800-82, and NIST 800-53.

Skills

• NIS / NIS2 knowledge (desirable).
• Railway industry experience and TS 50701 Knowledge (desirable).
• Understanding of Railway frameworks (e.g., EN 50126/9 or IEC 62278 and IEC 62425) and/or System engineering standards (e.g., ISO 15288, 12207) (desirable).