Senior Engineer (Cybersecurity)

SYSTRA UK & Ireland; City of Edinburgh; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

SYSTRA UK & Ireland is looking for a Senior or Principal Cyber Security Engineer to strengthen its Cyber Security team. This professional will deliver cybersecurity solutions for rail and infrastructure projects, working closely with clients to ensure their needs are met.

The ideal candidate must have strong leadership skills, at least three years of experience in OT cyber security, and a BSc in a relevant field. This role offers an ambitious environment where you can contribute to high-performance project teams.

Qualifications

• Minimum 3 years’ experience in OT cyber security.
• Ability to independently manage cyber security strategy.
• Experience in cyber security audits and assessments.

Responsibilities

• Deliver cybersecurity solutions to rail & infrastructure clients.
• Support the management of Cybersecurity schedules and deliverables.
• Review technical documents and assist in tenders.

Skills

Cybersecurity strategy/planning

Cyber security risk management

Threat Identification

Client relationship management

Knowledge of OT cyber security standards

Education

BSc in Cybersecurity

BSc in Computer Science

BSc in Computer Science Engineering

Job description

Context

We currently have an opportunity for a Senior or Principal Cyber Security Engineer to join our growing Cyber Security team within our Systems Engineering and Assurance discipline. This position will suit a committed and ambitious professional who can demonstrate strong leadership and interpersonal skills combined with commercial awareness and the ability to play their part in growing a dynamic high-performance team.

Missions / Main Duties

• Supporting the Team Lead (Cybersecurity and software assurance), you will deliver cybersecurity solutions to our rail & infrastructure clients on projects from the Concept phase up to the Operation and Maintenance Phase, managing the cybersecurity governance and lifecycle activities and actively contributing to the creation of relevant evidence.
• Supporting the Team Lead (Cybersecurity and software assurance) in cybersecurity strategy definition.
• Maintain good working relationships with clients and ensure that their requirements are being fulfilled by the business.
• Be able to adapt to design challenges and find workable solutions that take into account quality, cost and other disciplines.
• Ensure that all relevant cybersecurity standards are being met throughout the cybersecurity process and liaise with the other disciplines teams and other cybersecurity engineers if any issues are identified.
• Support the management of Cybersecurity schedules and deliverables.
• Attend standards briefings run by the Team Lead (Cybersecurity and software assurance) and assist if required.
• Liaise with clients and ensure their requirements are effectively communicated to the team.
• Review deliverables, including technical documents and reports and assist in the preparation of expressions of interest and tenders.

Profile / Skills

Essential Requirements For The Role Include

• BSc in Cybersecurity, BSc in Computer Science, BSc in Computer Science Engineering or similar
• At least 3 years’ experience in OT cyber security and cyber security risk management
• Ability to independently define and manage cyber security strategy/planning and establish the OT cyber security governance
• Experience in Threat Identification and Cyber Security Risk Management (Analysis and Assessment) for complex systems
• Working knowledge with the major OT cyber security standards (including IEC 62443 series)
• Ability to support supply chain management and perform cyber security audits
• Experience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security Assurance
• ISO 27005 / NIST 800-82 / NIST 800-53 Knowledge

Desirable Requirements For The Role Include

• NIS / NIS2 knowledge
• Railway industry experience and TS 50701 Knowledge
• Understanding of Railway frameworks (e.g. EN 50126 / 9 or IEC 62278 and IEC 62425) and/or System engineering standards (e.g. ISO 15288, 12207, ...)