Contract Cyber Security Engineer

Bright Purple Resourcing Ltd; Hempstalls; A distancia; GBP 92.000 - 101.000; A tiempo parcial

Descripción de la vacante

Bright Purple is seeking an experienced Cyber Engineering Contractor to support EU Cyber Resilience Act readiness for a global security technology manufacturer. The role involves hands‑on delivery across product lines, collaborating with engineering, software development, product management, regulatory, quality and service teams to close compliance gaps and embed security from ground up.

You will assess products against standards, define security requirements, review third‑party components, and

Formación

• Experience assessing products against cybersecurity standards and regulations.
• Familiarity with EU Cyber Resilience Act, NIST 800-53, NIST 800-218, IEC 62443, NIS2.
• Strong secure-by-design understanding and secure software development lifecycle knowledge.
• Understanding of software development and vulnerability management processes.
• Proven ability to produce clear technical security documentation.
• Ability to work independently across multiple engineering teams.
• OT/ICS/regulated environments experience is a plus.

Responsabilidades

• Support CRA readiness assessments and define security requirements and gates.
• Help select and implement SBOM tooling and review third‑party components.
• Assist with supplier security, regulatory audits, and customer security questionnaires.

Conocimientos

Regulatory knowledge

EU Cyber Resilience Act familiarity

Secure-by-design principles

Software development lifecycle

Vulnerability management

Technical security documentation

Stakeholder management

English communication

Herramientas

SAST tooling

SBOM tooling

Descripción del empleo

Cyber Engineering Contractor | EU Cyber Resilience | Contract

UK Remote, with occasional site travel
£500 - £550
Likely Outside IR35
12 months

Bright Purple are looking for an experienced Cyber Engineering Contractor to join a global security technology manufacturer as it prepares for the EU Cyber Resilience Act (CRA). This is a hands‑on, delivery‑focused role working across multiple product lines, partnering with engineering, software development, product management, regulatory, quality and service teams to assess products, close compliance gaps and build security into products from the ground up.

What we’re looking for:

• Experience assessing products against cybersecurity standards and regulations
• Knowledge of the EU Cyber Resilience Act, NIST 800-53, NIST 800-218, IEC 62443 and NIS2
• Strong understanding of secure‑by‑design principles and the Secure Software Development Lifecycle
• Understanding of software development and vulnerability management processes
• Experience producing clear technical security documentation
• Confidence working independently across multiple engineering teams
• Strong stakeholder management and communication skills
• OT/ICS, PLC and HMI experience would be a real plus
• SAST, SCA and SBOM tooling experience is highly desirable
• Background in manufacturing, defence, critical infrastructure or other regulated product environments is a bonus

You’ll support CRA readiness assessments, define security requirements and engineering gates, help select and implement SBOM tooling, review third‑party components and supplier security, and support customer security questionnaires and regulatory audits, all while helping to build a sustainable Product Security programme.

The role is UK remote, with occasional travel to client sites in England.

If you are keen

Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry.