Cybersecurity Assurance Engineer (m/w/d)

MERMEC Deutschland GmbH; München; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Mermec Deutschland GmbH, a key subsidiary of the MERMEC Group, is expanding in Germany and abroad, focusing on ETCS (ERTMS) technologies, railway automation, and digital interlocking. The role targets cybersecurity assurance for signalling products, with emphasis on DIN CLC/TS 50701, IEC 62443, ISO 27001, and KRITIS regulations.

Required are 3–5 years of cybersecurity experience, German (C1) and English (B2), and a proactive, detail-oriented mindset.

Qualifikationen

• Minimum 3–5 years of cybersecurity or IT security experience, preferably in railway tech.
• Solid understanding of cybersecurity frameworks and standards (e.g., DIN CLC/TS 50701, IEC 62443, ISO 27001/27002, NIST).
• Very good knowledge of German (C1) and English (B2).
• Experience with risk management, testing/validation of safety-critical systems, and supplier engagement.

Aufgaben

• Act as Cybersecurity Assurance Engineer in projects developing and homologating signalling products.
• Plan cybersecurity activities, organize documentation, and manage scope changes.
• Ensure compliance with regulations and standards; coordinate cybersecurity requirements across interfaces and customers.
• Write cybersecurity cases and SecAV and coordinate their resolution.
• Coordinate with other departments on cybersecurity tasks and ensure subcontractor compliance.
• Support in bidding with cybersecurity concepts, cost estimations, and subcontracts.

Kenntnisse

Cybersecurity experience

Regulatory standards

German/English proficiency

Communication skills

Teamwork

Leadership

Problem-solving

Ausbildung

Degree in Computer Science/Cybersecurity or related field

Jobbeschreibung

Mermec Deutschland GmbH is a key subsidiary of the MERMEC Group, a global leader in integrated railway transport solutions. The MERMEC Group operates in 21 countries and employs over 3,500 people worldwide. In addition to its permanent locations, the company drives numerous projects in Germany and abroad and is preparing for significant expansion in the coming years.Joining Mermec Deutschland means becoming part of a global center of excellence in ETCS (ERTMS) technologies, railway automation, and the groundbreaking digital interlocking solution based on the innovative Neupro architecture. With these unique competencies, we are shaping the future of sustainable, safe, and connected railway transport.To safeguard the transport systems, cybersecurity is a core priority at Mermec Deutschland. We focus on protecting sensitive systems and information from misuse or abuse, whether by unauthorized individuals or by malicious insiders. These efforts ensure the safety of travelers and staff while maintaining the reliability and resilience of transport operations.

Responsibilities

Act as Cybersecurity Assurance Engineer in projects developing and homologating signalling productsPlanning Cybersecurity Activites, Organization and documentation for the products in developmentEnsuring compliance with contractual requirements and managing any cybersecurity related changes of scope of work and contractEnsuring compliance to regulations and standards in particular DIN CLC/TS 50701, IEC62443, Sektorleitlinie, KRITIS VO, Sicherheitsgesetz, EIGV etcWriting Cybersecurity Cases and SecAV and coordinating their resolution at interfaces and with the customerKnowledge sharing and building internal awareness within the project teamsCoordinating with other departments concerning the cybersecurity tasks and aspects, in particular to managing cybersecurity related requirementsEnsure that subcontractors and suppliers respect all relevant cybersecurity requirementsSupport in bidding with respect to cybersecurity assurance by writing concepts, cost estimations and potential subcontractsIn charge of subcontractor engagement process and management for cybersecurity workpackages such as cybersecurity assessment servicesCybersecurity deviation management by means of Common Safety Method (CSM)Act as IT-Security Integrator as of Sektorleilinie 2.0

Technical skills, qualifications and professional experience

A degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.Minimum of 3-5 years of experience in cybersecurity or IT security roles, preferably in railway technology or comparableExperience with cybersecurity tools, firewalls, encryption methods, intrusion detection systems, etc.Solid understanding and practice of cybersecurity frameworks, regulations, and standards (e.g., DIN CLC/TS 50701, IEC 62443, KRITIS-VO, IT SicherheitsgesetzSektorleitlinie 2.0, ISO 27001, 27002, NIST, CENELEC,).Very good knowledge of German (C1) and English (B2).Preferably hands-on experience with railway safety-critical systems testing and validation, like ETCS or interlockingSolid understanding of system integration and configuration management processes.Experience in implementing risk management procedures and creating cybersecurity cases.Desired skills/knowledge Certifications such as CISSP, CISM, or similar are preferred.Leadership qualities to mentor junior engineers and drive validation activities.Experience with regulatory bodies and certification processes for railway systems.Strong problem-solving skills and the ability to work under pressure.Excellent communication and teamwork abilities.Proactive and self-motivated, with a high level of attention to detail.