Senior Cyber Security Engineer

Siemens; Glasgow; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Competitive salary

26 days holiday (±5)

Pension scheme

Subsidised healthcare

Job summary

Siemens Mobility in the UK is seeking a Senior Cyber Security Engineer to lead security across OT rail infrastructure. You will design secure architectures, perform threat analyses, and drive assurance activities with stakeholders on projects.

The role covers testing, incident response, and mentoring junior engineers, with opportunities to influence IEC 62443 and NIST standards. Offices include Ashby, Chippenham, or Glasgow for the right candidate.

Qualifications

• Holding or working towards a degree level in engineering, science or numerate discipline.
• Proven expertise in security engineering leadership in OT environments.
• Experience applying IEC 62443 standard series.
• Desirable certifications include CISSP, CCP, GICSP, SANS ICT Security or NCSC ICT Practitioner Security.

Responsibilities

• Engage with client security teams to define strategy and requirements.
• Design secure system architectures and select appropriate controls.
• Plan and perform threat and risk analyses and define countermeasures.
• Review artefacts from product and development for security.
• Support security monitoring and incident response deployment (e.g., SIEM).
• Assist network team with configuring security such as firewalls and DMZ.
• Verify implementation against security requirements during tests.
• Support penetration testing to identify vulnerabilities and remediation.
• Mentor junior engineers and lead by example.
• Represent security engineering at milestones and drive improvements.

Skills

Security engineering leadership

Threat analysis

Security architecture

Penetration testing

Mentoring

Communication skills

Education

Engineering/science oriented degree

Tools

CoreShield

SIEM

Firewalls

Job description

Siemens Mobility have an exciting opportunity for Senior Cyber Security Engineers to join our Rail Infrastructure business. This role would preferably be located out of our Ashby or Chippenham offices, but we would consider Birmingham, Poole, York or Glasgow for the right candidate.

We deliver secure, integrated rail infrastructure systems covering signalling, electrification, power SCADA, and station information, supported by advanced networks and cyber security. Our team works across the full project lifecycle, using industry standards, in-house solutions like CoreShield, and trusted third-party technologies to ensure resilient, compliant systems.

The Senior Cyber Security Engineer plays a key role in this, bringing expertise in both product and end-to-end solution security within Operational Technology environments. The role involves developing and leading effective cyber security solutions, including architecture design, security testing, and producing assurance evidence in line with evolving industry standards.

You will make impact by…

• Engaging with client security teams to understand their strategy, risk appetite, and assurance requirements, while specifying and maintaining project security requirements aligned to standards (e.g. NCSC CAF, ISO 27001, NIST, IEC 62443)
• Designing secure system architectures (including zoning and conduits), identifying appropriate security controls, and evaluating third-party components to ensure robust product & solution security.
• Planning and performing threat and risk analysis and definition of countermeasures in line with risk acceptance criteria of organisation.
• Compilation and review of artefacts produced during the development and engineering process regarding product & solution security.
• Supporting customer service team in development and deployment of security monitoring and incident response solutions e.g. SIEM as well as security configuration of railway system solutions and implanting and deploying cyber security solutions.
• Supporting the network team in the configuration of network security e.g. firewalls, DMZ, security applications or agents
• Verification of implementation regarding security requirements (e.g., as part of system test, factory, or site acceptance test).
• Validation (e penetration testing) to ensure that implementation fulfils security expectations of customers (e to identify security vulnerabilities, and to evaluate the effectiveness of remediation measures).
• Supporting team capability development being a role model to more junior team members by providing mentorship, guidance, support and leadership
• Representing security engineering at project milestones, driving continuous improvement through lessons learned, and contributing to the analysis and response to security vulnerabilities and incidents.

The candidate will also be expected to maintain an appreciation of new technologies, emerging risks, and standards, together with their application to support ongoing deliveries.

Your success will be grounded by…

• Holding or working towards a degree level (or equivalent) in an engineering, scientific or numerate discipline.
• Providing expertise in security engineering leadership in a demanding Operational Technology environments
• Having proven practical experience of applying IEC 62443 standard series.
• Preferably have at least one of the following: NCSC Certified Degree, Certified Information Systems Security Professional (CISSP), NCSC Certified Cyber Professional (CCP), Global Industrial Cyber Security Professional Certification (GICSP), NCSC ICT Practitioners Security or SANS ICT Security Professionals.
• Having penetration testing practical experience – Desirable
• Experience in mentoring and developing other engineers
• Excellent communication skills and the ability to influence both internal and external stakeholders.

You’ll benefit from…

• Competitive Salary
• 26 days holiday with an option to by/sell upto 5 days per year
• Attractive pension scheme
• Subsidised BUPA healthcare

#TransformTheEveryday with us

We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us!

At Siemens, we promote a growth mindset, the self-belief that we can learn and grow, take on new challenges and adapt to change. If you don't match all the criteria for this role but feel you have transferable skills to enable you to succeed, we encourage you to apply.