OT Cybersecurity Engineer – IEC 62443 (f/m/d)

XCMG Europe GmbH; Krefeld; On-site; EUR 90,000 - 120,000; Full time

Job summary

XCMG Europe GmbH is seeking a senior cybersecurity professional to shape secure mobile crane development. You will integrate IEC 62443-compliant practices, conduct threat modelling and risk assessments, and design hardening and secure communication controls across the product lifecycle.

In this role, you will collaborate with R&D teams in Europe and China, provide technical guidance, and travel internationally ~2–3 times per year while working in a hybrid model with up to two days of home office

Qualifications

• Bachelor’s or Master’s degree in a relevant technical discipline.
• 8–10 years of experience in industrial automation, embedded systems or OT cybersecurity.
• Hands-on experience with IEC 62443.
• Experience performing cybersecurity risk assessments (TARA) and threat modelling.
• ISO 21434 knowledge is a plus.
• Fluent German and English (written and spoken).

Responsibilities

• Develop cybersecurity concepts and requirements for mobile cranes per IEC 62443 and industrial standards.
• Conduct TARA, threat modelling and cybersecurity risk assessments to identify vulnerabilities and define mitigations.
• Design and evaluate security controls for industrial systems (authentication, secure communication, hardening, segmentation).
• Integrate cybersecurity into the product development lifecycle with secure-by-design principles.
• Provide technical guidance and training to engineering teams.
• Collaborate with international development teams, suppliers and external service providers.

Skills

IEC 62443 experience

Threat modelling

Cybersecurity risk assessment

Industrial automation

Embedded systems

Education

Bachelor's or Master's in Electrical/Automation/Mechatronics/Computer Engineering

Job description

Your mission

• Develop cybersecurity concepts and requirements for mobile cranes in accordance with IEC 62443 and applicable industrial cybersecurity standards.
• Conduct TARA, threat modelling and cybersecurity risk assessments to identify vulnerabilities and define mitigation measures.
• Design and evaluate technical security controls for industrial systems, including authentication, secure communication, system hardening and network segmentation.
• Integrate cybersecurity into the product development lifecycle, ensuring secure-by-design principles and compliance with applicable requirements.
• Provide technical guidance and training to engineering and development teams.
• Cooperation with international development teams, suppliers, and external service providers.

Your profile

• Bachelor's or Master's degree in Electrical Engineering, Automation Engineering, Mechatronics, Computer Engineering or a comparable technical discipline.
• Minimum 8–10 years of experience in industrial automation, embedded systems or OT cybersecurity.
• Hands-on experience with IEC 62443.
• Experience performing cybersecurity risk assessments (TARA) and threat modelling.
• Knowledge of ISO 21434 is considered an advantage.
• Fluent German and English (written and spoken).

Why us?

• Shape the cybersecurity of next-generation mobile cranes in an international engineering environment.
• Work closely with R&D teams in Europe and China on future-oriented technologies.
• International business travel to China approximately 2–3 times per year.
• Hybrid working model with up to 2 days of home office per week.
• Continuous professional development through technical training and challenging engineering projects