Cyber Security Engineer

Bright Purple Resourcing Ltd; England; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Bright Purple Resourcing Ltd is seeking an experienced Cyber Engineering Contractor to join a global security technology manufacturer as it prepares for the EU Cyber Resilience Act (CRA).

You will work hands-on across multiple product lines, collaborating with engineering, software development, product management, regulatory, quality and service teams to assess products, close compliance gaps and embed security from the ground up.

Qualifications

• Experience assessing products against cybersecurity standards and regulations.
• Knowledge of EU CRA, NIST 800-53, NIST 800-218, IEC 62443 and NIS2.
• Secure-by-design and Secure SDLC principles knowledge.
• Understanding of software development and vulnerability management processes.
• Ability to produce clear technical security documentation.
• Able to work independently across multiple engineering teams.
• Strong stakeholder management and communication skills.
• OT/ICS, PLC and HMI experience is a plus.
• SAST, SCA and SBOM tooling experience desirable.
• Background in manufacturing, defence or other regulated environments bonus.

Responsibilities

• Support CRA readiness assessments and define security requirements.
• Define engineering gates and SBOM tooling selections.
• Review third‑party components and supplier security.
• Assist in responding to customer security questionnaires and audits.
• Help build a sustainable Product Security programme.

Skills

Cybersecurity standards

CRA knowledge

NIST standards

Secure-by-design

Secure SDLC

Vulnerability management

Security documentation

Stakeholder management

Communication skills

OT/ICS experience

SAST/SCA/SBOM tooling

Regulated environments

Tools

SBOM tooling

SAST tooling

SCA tooling

Job description

Bright Purple are looking for an experienced Cyber Engineering Contractor to join a global security technology manufacturer as it prepares for the EU Cyber Resilience Act (CRA). This is a hands‑on, delivery‑focused role working across multiple product lines, partnering with engineering, software development, product management, regulatory, quality and service teams to assess products, close compliance gaps and build security into products from the ground up.

What we’re looking for:

• Experience assessing products against cybersecurity standards and regulations
• Knowledge of the EU Cyber Resilience Act, NIST 800-53, NIST 800-218, IEC 62443 and NIS2
• Strong understanding of secure‑by‑design principles and the Secure Software Development Lifecycle
• Understanding of software development and vulnerability management processes
• Experience producing clear technical security documentation
• Confidence working independently across multiple engineering teams
• Strong stakeholder management and communication skills
• OT/ICS, PLC and HMI experience would be a real plus
• SAST, SCA and SBOM tooling experience is highly desirable
• Background in manufacturing, defence, critical infrastructure or other regulated product environments is a bonus

You’ll support CRA readiness assessments, define security requirements and engineering gates, help select and implement SBOM tooling, review third‑party components and supplier security, and support customer security questionnaires and regulatory audits, all while helping to build a sustainable Product Security programme.

The role is UK remote, with occasional travel to client sites in England.

Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry.