Cybersecurity Assurance Engineer (m/f/d)

MERMEC Deutschland GmbH; München; Hybrid; EUR 90.000 - 140.000; Vollzeit

Benefits dieser Stelle

Hybrid work

Global onboarding

Employee development

Onboarding program

Intercultural training

Career support

Meal vouchers

Health budget

Special leave

Corporate benefits

Zusammenfassung

MERMEC Deutschland GmbH is a leading railway technology group seeking a Cybersecurity Assurance Engineer to lead cybersecurity activities in signalling projects. You will plan, document, and ensure compliance with safety and contractual requirements, coordinating with customers and subcontractors across international projects.

The role offers a hybrid work model with international collaboration in a dynamic engineering environment, focusing on ETCS, cyber risk management, and security testing of

Qualifikationen

• Degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience.
• 5–10 years in cybersecurity or IT security, preferably in railway tech.
• Experience with cybersecurity tools, firewalls, encryption methods, intrusion detection systems, etc.
• Solid understanding of frameworks and standards (ISO 27001, 27002, NIST, IEC 62443, DIN CLC/TS 50701).
• Business fluent German and English.
• Hands-on experience with railway safety-critical systems testing/validation (ETCS or interlocking) is a plus.
• System integration and configuration management knowledge.

Aufgaben

• Act as Cybersecurity Assurance Engineer in projects developing and homologating signalling products.
• Plan Cybersecurity activities, organization and documentation for products in development.
• Ensure compliance with contractual requirements and manage cybersecurity-related changes in scope.
• Write Cybersecurity Cases and SecAV and coordinate resolution with interfaces and customers.
• Knowledge sharing and building internal cybersecurity awareness within project teams.
• Coordinate cybersecurity tasks with other departments and manage cybersecurity requirements.
• Ensure subcontractors and suppliers respect cybersecurity requirements.
• Support bidding with concepts, cost estimations and subcontracts.
• In charge of subcontractor engagement for cybersecurity work packages such as assessment services.
• Cybersecurity deviation management by means of Common Safety Method (CSM).
• Act as IT-Security Integrator for Sektorleilinie 2.0.

Kenntnisse

Cybersecurity

Railway tech

Regulatory standards

German & English

ETCS/Interlocking

System integration

Risk management

Ausbildung

Degree in Computer Science

Tools

Firewalls

Encryption methods

Intrusion Detection

Jobbeschreibung

Mermec Deutschland GmbH is a key subsidiary of the MERMEC Group, a global leader in integrated railway transport solutions. The MERMEC Group operates in 21 countries and employs over 3,500 people worldwide. In addition to its permanent locations, the company drives numerous projects in Germany and abroad and is preparing for significant expansion in the coming years.

Joining Mermec Deutschland means becoming part of a global center of excellence in ETCS (ERTMS) technologies, railway automation, and the groundbreaking digital interlocking solution based on the innovative Neupro architecture. With these unique competencies, we are shaping the future of sustainable, safe, and connected railway transport.

To safeguard the transport systems, cybersecurity is a core priority at Mermec Deutschland. We focus on protecting sensitive systems and information from misuse or abuse, whether by unauthorized individuals or by malicious insiders. These efforts ensure the safety of travelers and staff while maintaining the reliability and resilience of transport operations.

Why Join Us

Joining MERMEC Deutschland offers the chance to work at the forefront of railway digitalisation and signalling technology within a dynamic international group, contributing to impactful infrastructure projects across Europe. It’s ideal for professionals seeking innovative tech challenges, cross-border collaboration, and growth in a globally connected engineering environment.

Your Role

• Act as Cybersecurity Assurance Engineer in projects developing and homologating signalling products
• Planning Cybersecurity Activites, Organization and documentation for the products in development
• Ensuring compliance with contractual requirements and managing any cybersecurity related changes of scope of work and contract
• Writing Cybersecurity Cases and SecAV and coordinating their resolution at interfaces and with the customer
• Knowledge sharing and building internal awareness within the project teams
• Coordinating with other departments concerning the cybersecurity tasks and aspects, to managing cybersecurity related requirements
• Ensure that subcontractors and suppliers respect all relevant cybersecurity requirements
• Support in bidding with respect to cybersecurity assurance by writing concepts, cost estimations and potential subcontracts
• In charge of subcontractor engagement process and management for cybersecurity workpackages such as cybersecurity assessment services
• Cybersecurity deviation management by means of Common Safety Method (CSM)
• Act as IT-Security Integrator as of Sektorleilinie 2.0

Your Profile and Skills

• A degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience
• Minimum of 5-10 years of experience in cybersecurity or IT security roles, preferably in railway technology or comparable
• Experience with cybersecurity tools, firewalls, encryption methods, intrusion detection systems, etc
• Solid understanding and practice of cybersecurity frameworks, regulations, and standards (e.g., DIN CLC/TS 50701, IEC 62443, KRITIS-VO, IT-Sicherheitsgesetz Sektorleitlinie 2.0, ISO 27001, 27002, NIST, CENELEC,)
• Business fluent German and English
• Preferably hands-on experience with railway safety-critical systems testing and validation, like ETCS or interlocking
• Solid understanding of system integration and configuration management processes.
• Experience in implementing risk management procedures and creating cybersecurity cases.

WHAT WE OFFER

• Hybrid working model: up to 10 days of home office per month, with at least two office days per week
• Modern and international working environment
• Active support and continuous development of our employees
• Structured global onboarding program
• Intercultural training and support
• Ongoing support in preparing for your next career step

Benefits & Additional Perks

• Monthly meal vouchers or restaurant tickets
• Monthly non-cash benefitof 50 EUR
• Health and wellbeing budget of up to 250 EUR every two years, for example for: Glasses / visual aids
• Health-related services
• Additional special leave for personal occasions, such as marriage, relocation
• Access to corporate benefits programs

WHY JOIN US

Be part of an International Corporate Group and contribute to the development of a forward-looking sector, participating in the creation of a more sustainable and environmentally friendly way of transport, capable of tackling the major challenges of the 21st century. All MERMEC group companies bring innovative solutions to the market which guarantee safe and efficient management of the railway infrastructure. We work with the highest integrity, culture of compliance and respect for human rights, while reducing the impact of our technology and environmental footprint. Join the rapidly growing railway market, whose wide range of professions (Systems, Hardware, Software, AI, Communication, Cybersecurity etc.) offers numerous career paths and opportunities to work toward safer and more efficient transportation.

Work in a stimulating and collaborative environment, with rapid decision-making processes and where everyone has the opportunity to make a real contribution. Mermec’s unwavering commitment to fostering an inclusive and diverse workplace has laid the foundation for our incredible growth. We thrive on the collective strength of our people who come from diverse backgrounds. We respect and value every experience associated with ethnicity, gender identity, sexual orientation, nationality, religion and disability.