Cyber Security Engineer

Quest Global; Tampere; On-site; EUR 90,000 - 130,000; Full time

Job summary

Quest Global in Tampere, Finland, is seeking a cybersecurity engineer to design and implement security for STATCOM systems in industrial OT environments. You will apply IEC 62443 controls, configure DMZ, manage firewalls, and perform vulnerability assessments to ensure secure, reliable operation.

Collaboration with engineering, IT, and OT teams is essential for compliant project execution. The role emphasizes continuous improvement of security controls and balancing customer requirements during

Responsibilities

• Cybersecurity Design and Implementation: Apply IEC 62443 cybersecurity requirements and best practices across system design, deployment, and maintenance. Implement and maintain cybersecurity controls, including system hardening and application whitelisting for PCs and engineering workstations for STATCOM systems in industrial/OT environments. Required experience with Network Attached Storage (NAS) and Data Exchange Server.
• Security Infrastructure and Network Segmentation: Configure and support DMZ infrastructure, including Active Directory, syslog servers, and jump servers. Manage and maintain firewalls, including rule configuration, access control, and network segmentation. Support secure network architecture for critical power and automation systems.
• Assessment, Testing, and Remediation: Conduct vulnerability assessments and mitigation activities, penetration testing, security compliance checks and remediation activities to identify and address security risks.
• Collaboration and Support: Collaborate with engineering, IT, and OT teams to ensure secure and reliable system operation. Support secure project execution and contribute to cybersecurity-related technical decisions.
• Compliance and Continuous Improvement: Maintain alignment with relevant cybersecurity standards and best practices, and support continuous improvement of security controls and processes.
• Unwinding customer requirements: Understand and analyse the customer requirements during tender stage. As a cyber expert, its important to balance between customer need and securing the system while proposing the security solutions

Job description

We are Quest Global. We're in the business of engineering, but what we're really building is a brighter future. It's not just what we do, but why we do it that makes us different. We believe engineering has the unique opportunity to solve the problems of today that stand in the way of tomorrow. For 25 years, we have strived to be the most trusted partner for the world's hardest engineering problems. As a global organization headquartered in Singapore, we live and work in 17 countries, with 56 global delivery centers, driven by 17,500+ extraordinary employees who make the impossible possible every day.

Quest Global brings deep industry knowledge and digital expertise to deliver E2E global product engineering services. We bring together technologies and industries alongside the contributions of diverse individuals and their areas of expertise to solve problems better, faster. This multi-dimensional approach enables us to solve the most important and large-scale challenges across the Aerospace & Defense, Automotive, Energy, Hi-Tech, Healthcare, Medical Devices, Rail and Semiconductor industries.

Job Requirements

Key Responsibilities:

• Cybersecurity Design and Implementation: Apply IEC 62443 cybersecurity requirements and best practices across system design, deployment, and maintenance. Implement and maintain cybersecurity controls, including system hardening and application whitelisting for PCs and engineering workstations for STATCOM systems in industrial/OT environments. Required experience with Network Attached Storage (NAS) and Data Exchange Server.
• Security Infrastructure and Network Segmentation: Configure and support DMZ infrastructure, including Active Directory, syslog servers, and jump servers. Manage and maintain firewalls, including rule configuration, access control, and network segmentation. Support secure network architecture for critical power and automation systems.
• Assessment, Testing, and Remediation: Conduct vulnerability assessments and mitigation activities, penetration testing, security compliance checks and remediation activities to identify and address security risks.
• Collaboration and Support: Collaborate with engineering, IT, and OT teams to ensure secure and reliable system operation. Support secure project execution and contribute to cybersecurity-related technical decisions.
• Compliance and Continuous Improvement: Maintain alignment with relevant cybersecurity standards and best practices, and support continuous improvement of security controls and processes.
• Unwinding customer requirements: Understand and analyse the customer requirements during tender stage. As a cyber expert, its important to balance between customer need and securing the system while proposing the security solutions

Related Certifications:

• IEC62443 certifications and trainings
• CISSP
• GICSP

* *At Quest Global, we believe in equal opportunity and are committed to preserving an inclusive and safe work environment. Our workplaces are places where we value and respect all people. In addition, we encourage work-life balance through flexible work schedules. By submitting my application, I agree that Quest Global Engineering Service GmbH may collect, store and process my data for the purpose of reviewing my application and for up to 750 days thereafter.