Senior Cyber Security Engineer

Siemens; Birmingham; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

26 days holiday

Pension scheme

BUPA healthcare

Job summary

Siemens Mobility seeks a Senior Cyber Security Engineer for Rail Infrastructure. The role focuses on security architecture, threat modeling, and end‑to‑end OT security, including testing and assurance evidence in line with industry standards.

You will engage with client security teams, design secure architectures, and lead risk analysis. The position offers strong mentorship and opportunity to influence security across projects.

Qualifications

• Degree in engineering, science or numerate discipline.
• Expertise leading security engineering in OT environments.
• Proven experience applying IEC 62443 standards.

Responsibilities

• Engage client security teams to capture strategy and assurance requirements; align to standards (NCSC CAF, ISO 27001, NIST, IEC 62443).
• Design secure system architectures and select appropriate security controls; assess third‑party components.
• Lead threat and risk analyses and define countermeasures based on risk criteria.
• Compile and review artefacts across development and engineering for product and solution security.
• Support customer service in deploying security monitoring and incident response solutions (e.g., SIEM) and secure railway systems.
• Configure network security (firewalls, DMZ, security apps) in collaboration with network teams.
• Verify implementation of security requirements through tests and site acceptance.
• Lead penetration testing activities and mentor junior engineers.
• Represent security engineering at milestones and drive continuous improvement.

Skills

Security architecture

Threat modeling

IEC 62443

Mentoring

Stakeholder influence

Education

Engineering degree or equivalent

Job description

Siemens Mobility have an exciting opportunity for Senior Cyber Security Engineers to join our Rail Infrastructure business. This role would preferably be located out of our Ashby or Chippenham offices, but we would consider Birmingham, Poole, York or Glasgow for the right candidate.

We deliver secure, integrated rail infrastructure systems covering signalling, electrification, power SCADA, and station information, supported by advanced networks and cyber security. Our team works across the full project lifecycle, using industry standards, in-house solutions like CoreShield, and trusted third-party technologies to ensure resilient, compliant systems.

The Senior Cyber Security Engineer plays a key role in this, bringing expertise in both product and end-to-end solution security within Operational Technology environments. The role involves developing and leading effective cyber security solutions, including architecture design, security testing, and producing assurance evidence in line with evolving industry standards.

You will make impact by…

• Engaging with client security teams to understand their strategy, risk appetite, and assurance requirements, while specifying and maintaining project security requirements aligned to standards (e.g. NCSC CAF, ISO 27001, NIST, IEC 62443)
• Designing secure system architectures (including zoning and conduits), identifying appropriate security controls, and evaluating third-party components to ensure robust product & solution security.
• Planning and performing threat and risk analysis and definition of countermeasures in line with risk acceptance criteria of organisation.
• Compilation and review of artefacts produced during the development and engineering process regarding product & solution security.
• Supporting customer service team in development and deployment of security monitoring and incident response solutions e.g. SIEM as well as security configuration of railway system solutions and implanting and deploying cyber security solutions.
• Supporting the network team in the configuration of network security e.g. firewalls, DMZ, security applications or agents
• Verification of implementation regarding security requirements (e.g., as part of system test, factory, or site acceptance test).
• Validation (e penetration testing) to ensure that implementation fulfils security expectations of customers (e to identify security vulnerabilities, and to evaluate the effectiveness of remediation measures).
• Supporting team capability development being a role model to more junior team members by providing mentorship, guidance, support and leadership
• Representing security engineering at project milestones, driving continuous improvement through lessons learned, and contributing to the analysis and response to security vulnerabilities and incidents.

The candidate will also be expected to maintain an appreciation of new technologies, emerging risks, and standards, together with their application to support ongoing deliveries.

Your success will be grounded by…

• Holding or working towards a degree level (or equivalent) in an engineering, scientific or numerate discipline.
• Providing expertise in security engineering leadership in a demanding Operational Technology environments
• Having proven practical experience of applying IEC 62443 standard series.
• Preferably have at least one of the following: NCSC Certified Degree, Certified Information Systems Security Professional (CISSP), NCSC Certified Cyber Professional (CCP), Global Industrial Cyber Security Professional Certification (GICSP), NCSC ICT Practitioners Security or SANS ICT Security Professionals.
• Having penetration testing practical experience – Desirable
• Experience in mentoring and developing other engineers
• Excellent communication skills and the ability to influence both internal and external stakeholders.

You’ll benefit from…

• Competitive Salary
• 26 days holiday with an option to by/sell upto 5 days per year
• Attractive pension scheme
• Subsidised BUPA healthcare

#TransformTheEveryday with us

We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us!

At Siemens, we promote a growth mindset, the self-belief that we can learn and grow, take on new challenges and adapt to change. If you don't match all the criteria for this role but feel you have transferable skills to enable you to succeed, we encourage you to apply.