Product Cybersecurity Specialist

TEEMA Group; Port Coquitlam; On-site; CAD 95,000 - 130,000; Full time

Benefits offered by this job

Competitive benefits

Flexible schedule

Company events

Catered meals

Wellness programs

Job summary

TEEMA Group is supporting a client in Port Coquitlam, BC, actively seeking a Product Cybersecurity Specialist to lead security activities for battery-electric mining equipment projects. The role focuses on translating cybersecurity guidance into concrete product requirements, coordinating with engineering teams and external consultants.

The position emphasizes risk assessment, secure development practices, and support for verification across hardware, firmware, and software domains within an

Qualifications

• Experience translating security findings into engineering requirements, acceptance criteria and actions.
• Knowledge of embedded devices, industrial automation, and how hardware, software and interfaces interact.
• Experience with secure development, vulnerability management, access control and software updates.
• Ability to interpret system diagrams, technical docs and test results for security implications.
• Strong technical writing, collaboration, and follow-through across multiple contributors.

Responsibilities

• Coordinate cybersecurity activities within the project with milestones and deliverables.
• Translate CRA consultant guidance into product requirements and evidence needs.
• Identify threats and assess cybersecurity risks with engineering teams.
• Review architecture to balance security with safety and maintenance requirements.
• Maintain traceability between risks, requirements, actions and verifications.

Skills

Cybersecurity risk assessment

Requirements translation

System architecture review

Secure development lifecycle

Threat modeling

Technical writing

Education

Bachelor's degree in cybersecurity, CS, electronics or related

Job description

Job Title: Product Cybersecurity Specialist

Job ID: 90557

Location: Port Coquitlam, British Columbia

Overview

With their headquarters in Europe, our client develops and tests equipment that will shape the mining industry for years to come. There are only a handful of companies pushing the limits of BEV mining technology, and their Advanced Engineering team in the Vancouver area are on the forefront of this technology.They currently have an opening for aProduct Cybersecurity Specialist to join their growing team. The Product Cybersecurity Specialist serves as the cybersecurity focal point within the project team developing battery-electric mining equipment and supporting systems. The role translates cybersecurity risks and specialist guidance into practical requirements, coordinates security activities with engineering, and tracks issues through implementation and verification. Working with an external Cyber Resilience Act (CRA) consultant and product compliance colleagues, the specialist helps the team develop and maintain secure products that support safe, productive, lower-emission mining.

What you will be doing

• Coordinate cybersecurity activities within the project, agreeing deliverables, contributors, and milestones with the project lead and tracking progress through release.
• Translate guidance from the external CRA consultant and product compliance team into product requirements, engineering actions, and evidence needs, seeking clarification where applicability or interpretation is unresolved.
• Work with systems, firmware, software, and hardware contributors to identify threats, assess product cybersecurity risks, and document proposed mitigations.
• Consider device interfaces, communications, remote access, software dependencies, and intended installation and service environments.
• Participate in architecture and design reviews to help teams select practical security measures and evaluate their effects on equipment operation, safety, and serviceability.
• Maintain traceability between cybersecurity risks, requirements, implementation actions, and verification results within the project's engineering processes.
• Coordinate security verification with developers, verification and validation colleagues, and specialist test providers; review findings and track corrective actions through retesting.
• Coordinate collection and review of supplier cybersecurity information and software component inventories, following up on gaps that affect the project.
• Assess the cybersecurity implications of design changes, newly identified vulnerabilities, and relevant field findings with the responsible engineering and support teams.
• Support remediation planning, secure update arrangements, and escalation through the organization's vulnerability and incident processes.
• Assemble and maintain project cybersecurity records and evidence for review by product compliance and the CRA consultant, identifying missing information before project decision points.
• Communicate cybersecurity status, unresolved risks, and required decisions to the project lead and relevant specialists, and help team members apply agreed security practices in their daily work.

What you must have

Practical experience assessing cybersecurity risks, defining controls, and working with technical teams to verify that identified issues have been addressed.

• Understanding of embedded devices, industrial automation, connected equipment, or comparable engineered products, including how hardware, software, communications, and external interfaces interact.
• Ability to translate security findings and specialist advice into clear engineering requirements, acceptance criteria, and prioritized actions.
• Working knowledge of secure development and vulnerability management, including access control, secure communications, software updates, and third-party software dependencies.
• Ability to examine system diagrams, interface descriptions, technical documentation, and test results and discuss security implications with developers and engineers.
• Ability to evaluate security measures in the context of equipment safety, availability, performance, maintainability, and field-service constraints.
• Clear technical writing, collaborative problem-solving, and disciplined follow-through across multiple contributors.
• Relevant education in cybersecurity, computer science, electronics, software, or a related discipline, or equivalent practical experience.

Preferred qualifications

• Experience supporting cybersecurity during the development and release of embedded or industrial products.
• Familiarity with the EU Cyber Resilience Act or experience translating product cybersecurity obligations into engineering activities and evidence.
• Familiarity with IEC 62443, particularly secure product development and component security requirements.
• Experience with embedded Linux, microcontrollers, industrial communications, device diagnostics, or remote service interfaces.
• Experience with threat modeling, security testing, software bills of materials, or vulnerability remediation for released products.
• Experience using requirements-management, issue-tracking, and configuration-control tools to maintain traceability between requirements, changes, and verification evidence.
• Experience with industrial machinery, mobile equipment, charging systems, batteries, or other products with long service lives.

Other Information

• This is a full time, on-site role.
• Competitive benefits program, flexible schedule, company events, catered meals, and wellness programs are some of the perks of working with our client.
• Our client believes in pay equity, fairness and transparency, and their ranges are determined by role, level, and location. The actual compensations offered to the final candidate is based on the ranges shown, and will vary depending on the candidate's relative experience, qualifications, and anticipated level of performance.