Senior Cyber Security Engineer

<p class="text-muted mb-3">We are looking for a Senior Cyber Security Engineer (Assurance) to join a Rail Infrastructure Communication and Information Systems (CIS) business. The role is flexible in location, with weekly face-to-face working required in Chippenham or Ashby de la Zouch, UK.</p>

<p class="text-muted mb-3">The Role</p>

<p class="text-muted mb-3">As a Senior Cyber Security Engineer (Assurance), you will provide technical leadership across product and whole-solution security within Operational Technology (OT) environments. You will lead and advise on cyber security activities throughout the engineering lifecycle, from bid and design through to commissioning and support.</p>

<p class="text-muted mb-3">You will play a key role in securing rail signalling and control systems, electrification, SCADA, and station information and security systems.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Engage with customer security teams to understand security strategies, assurance</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements and risk appetite.</h5>

<p class="text-muted mb-3">Define and maintain security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements and support compliance with NIS/NIS2, EU CRA, IEC 62443 and TS 50701.</h5>

<p class="text-muted mb-3">Develop Cyber Security Management Plans and monitor delivery against time, cost and quality.</p>

<p class="text-muted mb-3">Develop secure architectures using zones and conduits, identifying appropriate security controls.</p>

<p class="text-muted mb-3">Lead threat and risk assessments, defining appropriate countermeasures in line with risk acceptance criteria.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Assess third-party components against product and solution security requirements.</h5>

<p class="text-muted mb-3">Review security engineering artefacts and verify implementation through system, factory and site acceptance testing.</p>

<p class="text-muted mb-3">Plan and support security validation, including penetration testing, vulnerability identification and remediation assessment.</p>

<p class="text-muted mb-3">Support project teams in developing product and solution security capabilities and represent security engineering at milestone and stage-gate reviews.</p>

<p class="text-muted mb-3">Contribute to vulnerability and incident response, lessons learned and continuous improvement.</p>

<p class="text-muted mb-3">Maintain awareness of emerging technologies, cyber risks, threats and relevant standards.</p>

<p class="text-muted mb-3">Qualifications, Skills & Experience</p>

<p class="text-muted mb-3">Degree or equivalent qualification in engineering, science or a numerate discipline.</p>

<p class="text-muted mb-3">Proven experience providing security engineering leadership within demanding Operational Technology environments.</p>

<p class="text-muted mb-3">Practical experience applying the IEC 62443 standard series and an understanding of CENELEC standards.</p>

<p class="text-muted mb-3">Experience with security assurance, risk assessment, architecture and security testing.</p>

<p class="text-muted mb-3">Experience mentoring and developing engineers.</p>

<p class="text-muted mb-3">Excellent communication and stakeholder management skills, with the ability to influence internal and external stakeholders.</p>

<p class="text-muted mb-3">Preferably hold one or more of: CISSP, CSSLP or CESG Certified Professional (CCP)</p>