Cybersecurity Assurance Engineer (m/f/d)

MERMEC Deutschland GmbH; München; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working model

Global onboarding program

Meal vouchers

Job summary

MERMEC Deutschland GmbH in Munich is seeking a Cybersecurity Assurance Engineer to lead security activities for signalling products and ensure conformance with railway safety standards.

You will plan cybersecurity activities, coordinate with internal teams and subcontractors, write cybersecurity cases, and support bids. Fluent German and English are required; hybrid work is offered.

Qualifications

• A degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 5-10 years of experience in cybersecurity or IT security roles, preferably in railway technology or comparable.
• Experience with cybersecurity tools, firewalls, encryption methods, intrusion detection systems, etc
• Solid understanding and practice of cybersecurity frameworks, regulations, and standards (e.g., DIN CLC/TS 50701, IEC 62443, KRITIS-VO, IT-Sicherheitsgesetz Sektorleitlinie 2.0, ISO 27001, 27002, NIST, CENELEC,)
• Business fluent German and English
• Preferably hands-on experience with railway safety-critical systems testing and validation, like ETCS or interlocking
• Solid understanding of system integration and configuration management processes.
• Experience in implementing risk management procedures and creating cybersecurity cases.

Responsibilities

• Act as Cybersecurity Assurance Engineer in projects developing and homologating signalling products
• Planning Cybersecurity Activites, Organization and documentation for the products in development
• Ensuring compliance with contractual requirements and managing any cybersecurity related changes of scope of work and contract
• Writing Cybersecurity Cases and SecAV and coordinating their resolution at interfaces and with the customer
• Knowledge sharing and building internal awareness within the project teams
• Coordinating with other departments concerning the cybersecurity tasks and aspects, to managing cybersecurity related requirements
• Ensure that subcontractors and suppliers respect all relevant cybersecurity requirements
• Support in bidding with respect to cybersecurity assurance by writing concepts, cost estimations and potential subcontracts
• In charge of subcontractor engagement process and management for cybersecurity workpackages such as cybersecurity assessment services
• Cybersecurity deviation management by means of Common Safety Method (CSM)
• Act as IT-Security Integrator as of Sektorleilinie 2.0

Skills

Cybersecurity expertise

German and English fluency

Railway cybersecurity experience

Risk management

Education

Degree in Computer Science or Cybersecurity

Job description

Mermec Deutschland GmbH is a key subsidiary of the MERMEC Group, a global leader in integrated railway transport solutions. The MERMEC Group operates in 21 countries and employs over 3,500 people worldwide. In addition to its permanent locations, the company drives numerous projects in Germany and abroad and is preparing for significant expansion in the coming years.

Joining Mermec Deutschland means becoming part of a global center of excellence in ETCS (ERTMS) technologies, railway automation, and the groundbreaking digital interlocking solution based on the innovative Neupro architecture. With these unique competencies, we are shaping the future of sustainable, safe, and connected railway transport.

To safeguard the transport systems, cybersecurity is a core priority at Mermec Deutschland. We focus on protecting sensitive systems and information from misuse or abuse, whether by unauthorized individuals or by malicious insiders. These efforts ensure the safety of travelers and staff while maintaining the reliability and resilience of transport operations.

Why Join Us

Joining MERMEC Deutschland offers the chance to work at the forefront of railway digitalisation and signalling technology within a dynamic international group, contributing to impactful infrastructure projects across Europe. It’s ideal for professionals seeking innovative tech challenges, cross-border collaboration, and growth in a globally connected engineering environment.

Your Role

• Act as Cybersecurity Assurance Engineer in projects developing and homologating signalling products
• Planning Cybersecurity Activites, Organization and documentation for the products in development
• Ensuring compliance with contractual requirements and managing any cybersecurity related changes of scope of work and contract
• Writing Cybersecurity Cases and SecAV and coordinating their resolution at interfaces and with the customer
• Knowledge sharing and building internal awareness within the project teams
• Coordinating with other departments concerning the cybersecurity tasks and aspects, to managing cybersecurity related requirements
• Ensure that subcontractors and suppliers respect all relevant cybersecurity requirements
• Support in bidding with respect to cybersecurity assurance by writing concepts, cost estimations and potential subcontracts
• In charge of subcontractor engagement process and management for cybersecurity workpackages such as cybersecurity assessment services
• Cybersecurity deviation management by means of Common Safety Method (CSM)
• Act as IT-Security Integrator as of Sektorleilinie 2.0

Your Profile and Skills

• A degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience
• Minimum of 5-10 years of experience in cybersecurity or IT security roles, preferably in railway technology or comparable
• Experience with cybersecurity tools, firewalls, encryption methods, intrusion detection systems, etc
• Solid understanding and practice of cybersecurity frameworks, regulations, and standards (e.g., DIN CLC/TS 50701, IEC 62443, KRITIS-VO, IT-Sicherheitsgesetz Sektorleitlinie 2.0, ISO 27001, 27002, NIST, CENELEC,)
• Business fluent German and English
• Preferably hands-on experience with railway safety-critical systems testing and validation, like ETCS or interlocking
• Solid understanding of system integration and configuration management processes.
• Experience in implementing risk management procedures and creating cybersecurity cases.

WHAT WE OFFER

• Hybrid working model: up to 10 days of home office per month, with at least two office days per week
• Modern and international working environment
• Active support and continuous development of our employees
• Structured global onboarding program
• Intercultural training and support
• Ongoing support in preparing for your next career step

Benefits & Additional Perks

• Monthly meal vouchers or restaurant tickets
• Monthly non-cash benefitof 50 EUR
• Health and wellbeing budget of up to 250 EUR every two years, for example for: Glasses / visual aids
• Health-related services
• Additional special leave for personal occasions, such as marriage, relocation
• Access to corporate benefits programs

WHY JOIN US

Be part of an International Corporate Group and contribute to the development of a forward-looking sector, participating in the creation of a more sustainable and environmentally friendly way of transport, capable of tackling the major challenges of the 21st century. All MERMEC group companies bring innovative solutions to the market which guarantee safe and efficient management of the railway infrastructure. We work with the highest integrity, culture of compliance and respect for human rights, while reducing the impact of our technology and environmental footprint. Join the rapidly growing railway market, whose wide range of professions (Systems, Hardware, Software, AI, Communication, Cybersecurity etc.) offers numerous career paths and opportunities to work toward safer and more efficient transportation.

Work in a stimulating and collaborative environment, with rapid decision-making processes and where everyone has the opportunity to make a real contribution. Mermec’s unwavering commitment to fostering an inclusive and diverse workplace has laid the foundation for our incredible growth. We thrive on the collective strength of our people who come from diverse backgrounds. We respect and value every experience associated with ethnicity, gender identity, sexual orientation, nationality, religion and disability.