cybersecurity engineer

Enfint; Berlin; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

35‑hour workweek

30 days vacation

Flexible working time

On-site cafeteria

Welcome Days in global company

Zusammenfassung

GE Vernova приглашает к специалисту по кибербезопасности для поддержки проектов сProposal до внедрения, включая архитектурные решения и сертификацию по IEC 62443.

Требуется опыт в угрозах, оценке рисков и управлении уязвимостями; знание NI S2 и ISO 27001 обязательно. Работа предполагает путешествия и взаимодействие с командами за пределами Германии.

Qualifikationen

• Глубокие знания кибербезопасности и индустриальной IT/OT, включая IEC 62443, CRA, NIS2 и ISO27001.
• Опыт моделирования угроз, оценки рисков и обзоров безопасности.
• Знания управления уязвимостями, CVE/CVSS и advisory.
• Опыт работы с SBOM и соответствием ПО с открытым исходным кодом.
• Опыт в междисциплинарных проектах разработки и ориентация на клиента.

Aufgaben

• Поддержка проектов по кибербезопасности от proposal до внедрения у клиента.
• Разработка мер в ответ на требования критической инфраструктуры (электростанции, железнодорожный транспорт).
• Обработкa технических анкет безопасности (RFI/RFQ) и проектирование архитектур.
• Определение конфигураций для ПК, коммутаторов, firewall, PLC и мониторинга.
• Поддержка сертификаций процедур и архитектур по IEC 62443-3.

Kenntnisse

Кибербезопасность OT/IT

Опыт threat modelling

Security reviews

Ausbildung

Университетская степень по промышленной IT, кибербезопасности или смежной области

Tools

SBOM и open-source compliance

Jobbeschreibung

Описание

GE Vernova provides portfolio-based system solutions for cybersecurity in operational technology and plant-adjacent IT, supporting industrial projects from proposal preparation through customer commissioning.

Задачи

• Support projects on cybersecurity from the proposal phase through customer implementation;


• Assess cybersecurity requirements for critical infrastructure, including power plants and railway operations, and develop measures to meet them;


• Process technical security questionnaires, including RFI/RFQ;


• Design and adapt system architectures according to customer specifications;


• Define configurations for PCs, switches, firewalls, PLCs, and monitoring stations across projects;


• Prepare and support certification of procedures and standard system architectures according to IEC 62443-3;


• Assess and implement legal and normative requirements, including the Cyber Resilience Act, NIS2 Directive, and ISO/IEC 27001;


• Advise development departments on Security by Design and Secure Development Lifecycle;


• Plan, monitor, conduct, and evaluate testing activities;


• Support security incident response;


• Coordinate continuously with the development of automation components and support testing of automation systems;


• Help define and maintain processes for creating and managing Software Bill of Materials;


• Plan, conduct, and participate in technical cybersecurity meetings with customers, classification societies, and suppliers;


• Develop and deliver a company-wide cybersecurity training concept;


• Create cybersecurity guidelines, best practices, and technical policies for industrial plants and coordinate them with colleagues in the USA, UK, France, and India;


• Promote a sustainable security culture within the company;


• Travel nationally and internationally for technical meetings, site visits, and customer visits.

Требования

• University degree in Industrial IT, Cyber Security, IT with a cybersecurity specialization, Automation & IT, or a comparable field;


• Strong knowledge of cybersecurity and industrial IT/OT, especially IEC 62443, CRA, NIS2, and ISO 27001;


• Experience with threat modelling, security risk assessments, and security reviews;


• Knowledge of vulnerability management and CVEs, CVSS, and security advisories;


• Experience with Software Bill of Materials and open-source compliance;


• Experience in interdisciplinary development projects;


• Strong customer orientation and communication skills;


• Very good German and English skills;


• Structured and solution-oriented working style;


• High initiative and sense of responsibility;


• Strong moderation and presentation skills.

Условия

• 35-Hour workweek and 30 days of vacation;


• Flexible working time arrangements;


• On-site cafeteria;


• Welcome Days in a global company; No relocation assistance is provided.