Senior Cyber Security Engineer

Mane; Chippenham, Ashby-de-la-Zouch; Hybrid; GBP 80,000 - 120,000; Full time

Job summary

Mane seeks a Senior Cyber Security Engineer (Assurance) to provide technical leadership across product and whole‑solution security in rail OT environments. You will lead security activities through the engineering lifecycle—from bid and design to commissioning and support, securing rail signalling, SCADA and related systems.

The role offers flexible UK location with weekly face‑to‑face in Chippenham or Ashby de la Zouch, plus collaboration with customer security teams to define, implement and

Qualifications

• Degree or equivalent qualification in engineering, science or numerate discipline.
• Proven experience providing security engineering leadership within OT environments.
• Experience applying IEC 62443 and understanding CENELEC standards.
• Experience with security assurance, risk assessment, architecture and testing.
• Experience mentoring engineers and influencing stakeholders.

Responsibilities

• Engage with customer security teams to understand security strategies and risk appetite.
• Define and maintain security requirements; support compliance with NIS/NIS2, IEC 62443 and TS 50701.
• Develop Cyber Security Management Plans and monitor delivery against time, cost and quality.
• Develop secure architectures using zones and conduits with appropriate controls.
• Lead threat and risk assessments and define countermeasures.
• Assess third-party components against security requirements.
• Review artefacts and verify implementation via testing (system, factory, site).
• Plan and support security validation including penetration testing and remediation.
• Support project teams in developing security capabilities and participate in milestone reviews.
• Contribute to vulnerability management, incident response and continuous improvement.
• Maintain awareness of emerging technologies, threats and standards.

Skills

Security leadership

IEC 62443

Security assurance

Mentoring engineers

Communication

Stakeholder management

CISSP CSSLP CCP (certs)

Education

Engineering degree or equivalent

Job description

We are looking for a Senior Cyber Security Engineer (Assurance) to join a Rail Infrastructure Communication and Information Systems (CIS) business. The role is flexible in location, with weekly face-to-face working required in Chippenham or Ashby de la Zouch, UK.

The Role

As a Senior Cyber Security Engineer (Assurance), you will provide technical leadership across product and whole-solution security within Operational Technology (OT) environments. You will lead and advise on cyber security activities throughout the engineering lifecycle, from bid and design through to commissioning and support.
You will play a key role in securing rail signalling and control systems, electrification, SCADA, and station information and security systems.

Key Responsibilities

• 
  Engage with customer security teams to understand security strategies, assurance requirements and risk appetite.
• 
  Define and maintain security requirements and support compliance with NIS/NIS2, EU CRA, IEC 62443 and TS 50701.
• 
  Develop Cyber Security Management Plans and monitor delivery against time, cost and quality.
• 
  Develop secure architectures using zones and conduits, identifying appropriate security controls.
• 
  Lead threat and risk assessments, defining appropriate countermeasures in line with risk acceptance criteria.
• 
  Assess third-party components against product and solution security requirements.
• 
  Review security engineering artefacts and verify implementation through system, factory and site acceptance testing.
• 
  Plan and support security validation, including penetration testing, vulnerability identification and remediation assessment.
• 
  Support project teams in developing product and solution security capabilities and represent security engineering at milestone and stage-gate reviews.
• 
  Contribute to vulnerability and incident response, lessons learned and continuous improvement.
• 
  Maintain awareness of emerging technologies, cyber risks, threats and relevant standards.

Qualifications, Skills & Experience

• 
  Degree or equivalent qualification in engineering, science or a numerate discipline.
• 
  Proven experience providing security engineering leadership within demanding Operational Technology environments.
• 
  Practical experience applying the IEC 62443 standard series and an understanding of CENELEC standards.
• 
  Experience with security assurance, risk assessment, architecture and security testing.
• 
  Experience mentoring and developing engineers.
• 
  Excellent communication and stakeholder management skills, with the ability to influence internal and external stakeholders.
• 
  Preferably hold one or more of: CISSP, CSSLP or CESG Certified Professional (CCP).