Remote Contract Cybersecurity Engineer - CRA Compliance

Bright Purple Resourcing Ltd; Hempstalls; À distance; GBP 92 000 - 101 000; Temps partiel

Résumé du poste

Bright Purple is seeking an experienced Cyber Engineering Contractor to support EU Cyber Resilience Act readiness for a global security technology manufacturer. The role involves hands‑on delivery across product lines, collaborating with engineering, software development, product management, regulatory, quality and service teams to close compliance gaps and embed security from ground up.

You will assess products against standards, define security requirements, review third‑party components, and

Qualifications

• Experience assessing products against cybersecurity standards and regulations.
• Familiarity with EU Cyber Resilience Act, NIST 800-53, NIST 800-218, IEC 62443, NIS2.
• Strong secure-by-design understanding and secure software development lifecycle knowledge.
• Understanding of software development and vulnerability management processes.
• Proven ability to produce clear technical security documentation.
• Ability to work independently across multiple engineering teams.
• OT/ICS/regulated environments experience is a plus.

Responsabilités

• Support CRA readiness assessments and define security requirements and gates.
• Help select and implement SBOM tooling and review third‑party components.
• Assist with supplier security, regulatory audits, and customer security questionnaires.

Connaissances

Regulatory knowledge

EU Cyber Resilience Act familiarity

Secure-by-design principles

Software development lifecycle

Vulnerability management

Technical security documentation

Stakeholder management

English communication

Outils

SAST tooling

SBOM tooling

Description du poste

Bright Purple is seeking an experienced Cyber Engineering Contractor to support EU Cyber Resilience Act readiness for a global security technology manufacturer. The role involves hands‑on delivery across product lines, collaborating with engineering, software development, product management, regulatory, quality and service teams to close compliance gaps and embed security from ground up.

You will assess products against standards, define security requirements, review third‑party components, and