OT Cybersecurity Engineer – IEC 62443 (f/m/d)

XCMG European Research Center GmbH; Krefeld; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

International travel 2–3x per year

Professional development

Job summary

XCMG European Research Center GmbH in Germany is seeking a Senior Cybersecurity Engineer to support mobile cranes. You will develop cybersecurity concepts, perform TARA and threat modelling, and define risk mitigation aligned with IEC 62443 and ISO 21434.

You will integrate security into the product lifecycle, mentor engineering teams, and work with international development teams and suppliers. The role is hybrid with travel to China 2–3 times per year.

Qualifications

• Bachelor's or Master's degree in a technical field as listed.
• 8–10 years of experience in industrial automation, embedded systems or OT cybersecurity.
• Hands-on experience with IEC 62443.
• Experience performing cybersecurity risk assessments (TARA) and threat modelling.
• Knowledge of ISO 21434 is advantageous.
• Fluent German and English (written and spoken).

Responsibilities

• Develop cybersecurity concepts and requirements for mobile cranes in accordance with IEC 62443 and applicable standards.
• Conduct TARA, threat modelling and cybersecurity risk assessments to identify vulnerabilities and define mitigations.
• Design and evaluate security controls for industrial systems (authentication, secure communication, hardening, segmentation).
• Integrate cybersecurity into the product development lifecycle with secure-by-design principles.
• Provide technical guidance and training to engineering teams.
• Collaborate with international development teams, suppliers and external service providers.

Skills

IEC 62443 experience

Threat modelling

TARA risk assessment

Embedded systems

Industrial automation

Education

Bachelor's or Master's in Electrical/Automation/Mechatronics/Computer Engineering

Job description

Your mission

• Develop cybersecurity concepts and requirements for mobile cranes in accordance with IEC 62443 and applicable industrial cybersecurity standards.
• Conduct TARA, threat modelling and cybersecurity risk assessments to identify vulnerabilities and define mitigation measures.
• Design and evaluate technical security controls for industrial systems, including authentication, secure communication, system hardening and network segmentation.
• Integrate cybersecurity into the product development lifecycle, ensuring secure-by-design principles and compliance with applicable requirements.
• Provide technical guidance and training to engineering and development teams.
• Cooperation with international development teams, suppliers, and external service providers.

Your profile

• Bachelor's or Master's degree in Electrical Engineering, Automation Engineering, Mechatronics, Computer Engineering or a comparable technical discipline.
• Minimum 8–10 years of experience in industrial automation, embedded systems or OT cybersecurity.
• Hands-on experience with IEC 62443.
• Experience performing cybersecurity risk assessments (TARA) and threat modelling.
• Knowledge of ISO 21434 is considered an advantage.
• Fluent German and English (written and spoken).

Why us?

• Shape the cybersecurity of next-generation mobile cranes in an international engineering environment.
• Work closely with R&D teams in Europe and China on future-oriented technologies.
• International business travel to China approximately 2–3 times per year.
• Hybrid working model with up to 2 days of home office per week.
• Continuous professional development through technical training and challenging engineering projects