Senior Cyber Security Engineer

Siemens; Ashby-de-la-Zouch; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Competitive Salary

Pension scheme

Private healthcare

Job summary

Siemens Mobility in the UK seeks a Senior Cyber Security Engineer to lead security design across OT rail infrastructure. You will drive architecture, threat modelling, security testing and assurance evidence in line with industry standards.

Roles are based at Ashby-de-la-Zouch or Chippenham, with consideration for Birmingham, Poole, York or Glasgow for the right candidate. You will partner with client security teams, perform risk analysis, mentor engineers, and represent security at project

Qualifications

• Degree in engineering, science or numerate field.
• Proven leadership in security engineering for OT environments.
• Experience applying IEC 62443 standard series.

Responsibilities

• Lead architecture design and security testing across OT rail systems.
• Develop assurance evidence aligned to industry standards.
• Mentor junior engineers and drive security improvements.

Skills

Security leadership

OT security

Threat analysis

Architecture design

Mentoring

Education

Bachelor's degree in engineering or sciences

Tools

SIEM

Firewall configurations

Job description

Siemens Mobility have an exciting opportunity for Senior Cyber Security Engineers to join our Rail Infrastructure business. This role would preferably be located out of our Ashby or Chippenham offices, but we would consider Birmingham, Poole, York or Glasgow for the right candidate.

We deliver secure, integrated rail infrastructure systems covering signalling, electrification, power SCADA, and station information, supported by advanced networks and cyber security. Our team works across the full project lifecycle, using industry standards, in-house solutions like CoreShield, and trusted third-party technologies to ensure resilient, compliant systems.

The Senior Cyber Security Engineer plays a key role in this, bringing expertise in both product and end-to-end solution security within Operational Technology environments. The role involves developing and leading effective cyber security solutions, including architecture design, security testing, and producing assurance evidence in line with evolving industry standards.

You will make impact by…

• Engaging with client security teams to understand their strategy, risk appetite, and assurance requirements, while specifying and maintaining project security requirements aligned to standards (e.g. NCSC CAF, ISO 27001, NIST, IEC 62443)
• Designing secure system architectures (including zoning and conduits), identifying appropriate security controls, and evaluating third-party components to ensure robust product & solution security.
• Planning and performing threat and risk analysis and definition of countermeasures in line with risk acceptance criteria of organisation.
• Compilation and review of artefacts produced during the development and engineering process regarding product & solution security.
• Supporting customer service team in development and deployment of security monitoring and incident response solutions e.g. SIEM as well as security configuration of railway system solutions and implanting and deploying cyber security solutions.
• Supporting the network team in the configuration of network security e.g. firewalls, DMZ, security applications or agents
• Verification of implementation regarding security requirements (e.g., as part of system test, factory, or site acceptance test).
• Validation (e penetration testing) to ensure that implementation fulfils security expectations of customers (e to identify security vulnerabilities, and to evaluate the effectiveness of remediation measures).
• Supporting team capability development being a role model to more junior team members by providing mentorship, guidance, support and leadership
• Representing security engineering at project milestones, driving continuous improvement through lessons learned, and contributing to the analysis and response to security vulnerabilities and incidents.

The candidate will also be expected to maintain an appreciation of new technologies, emerging risks, and standards, together with their application to support ongoing deliveries.

Your success will be grounded by…

• Holding or working towards a degree level (or equivalent) in an engineering, scientific or numerate discipline.
• Providing expertise in security engineering leadership in a demanding Operational Technology environments
• Having proven practical experience of applying IEC 62443 standard series.
• Preferably have at least one of the following: NCSC Certified Degree, Certified Information Systems Security Professional (CISSP), NCSC Certified Cyber Professional (CCP), Global Industrial Cyber Security Professional Certification (GICSP), NCSC ICT Practitioners Security or SANS ICT Security Professionals.
• Having penetration testing practical experience – Desirable
• Experience in mentoring and developing other engineers
• Excellent communication skills and the ability to influence both internal and external stakeholders.

You’ll benefit from…

• Competitive Salary
• 26 days holiday with an option to by/sell upto 5 days per year
• Attractive pension scheme
• Subsidised BUPA healthcare

#TransformTheEveryday with us

We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us!

At Siemens, we promote a growth mindset, the self-belief that we can learn and grow, take on new challenges and adapt to change. If you don't match all the criteria for this role but feel you have transferable skills to enable you to succeed, we encourage you to apply.