Senior Engineer (Cybersecurity)

SYSTRA UK & Ireland; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

SYSTRA UK & Ireland is looking for a Senior or Principal Cyber Security Engineer to join their growing team in Greater London. The role involves delivering cybersecurity solutions for rail and infrastructure projects, ensuring compliance with relevant standards, and managing cybersecurity governance.

The ideal candidate should have a BSc in Cybersecurity or a related field, along with at least 3 years of experience in OT cyber security. Strong leadership and interpersonal skills are essential for this high-performance team environment.

Qualifications

• At least 3 years of experience in OT cyber security and risk management.
• Experience with major OT cyber security standards like IEC 62443.
• Knowledge of ISO 27005, NIST 800-82, NIST 800-53.

Responsibilities

• Deliver cybersecurity solutions to rail and infrastructure clients.
• Manage cybersecurity governance and lifecycle activities.
• Ensure compliance with cybersecurity standards.

Skills

Cybersecurity strategy definition

Threat Identification

Cyber Security Risk Management

Client relationship management

Adaptability to design challenges

Education

BSc in Cybersecurity or similar

Job description

Context

We currently have an opportunity for a Senior or Principal Cyber Security Engineer to join our growing Cyber Security team within our Systems Engineering and Assurance discipline. This position will suit a committed and ambitious professional who can demonstrate strong leadership and interpersonal skills combined with commercial awareness and the ability to play their part in growing a dynamic high-performance team.

Missions / Main Duties

• Supporting the Team Lead (Cybersecurity and software assurance), you will deliver cybersecurity solutions to our rail & infrastructure clients on projects from the Concept phase up to the Operation and Maintenance Phase, managing the cybersecurity governance and lifecycle activities and actively contributing to the creation of relevant evidence.
• Supporting the Team Lead (Cybersecurity and software assurance) in cybersecurity strategy definition.
• Maintain good working relationships with clients and ensure that their requirements are being fulfilled by the business.
• Be able to adapt to design challenges and find workable solutions that take into account quality, cost and other disciplines.
• Ensure that all relevant cybersecurity standards are being met throughout the cybersecurity process and liaise with the other disciplines teams and other cybersecurity engineers if any issues are identified.
• Support the management of Cybersecurity schedules and deliverables.
• Attend standards briefings run by the Team Lead (Cybersecurity and software assurance) and assist if required.
• Liaise with clients and ensure their requirements are effectively communicated to the team.
• Review deliverables, including technical documents and reports and assist in the preparation of expressions of interest and tenders.

Profile / Skills

Essential Requirements For The Role Include

• BSc in Cybersecurity, BSc in Computer Science, BSc in Computer Science Engineering or similar
• At least 3 years’ experience in OT cyber security and cyber security risk management
• Ability to independently define and manage cyber security strategy/planning and establish the OT cyber security governance
• Experience in Threat Identification and Cyber Security Risk Management (Analysis and Assessment) for complex systems
• Working knowledge with the major OT cyber security standards (including IEC 62443 series)
• Ability to support supply chain management and perform cyber security audits
• Experience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security Assurance
• ISO 27005 / NIST 800-82 / NIST 800-53 Knowledge

Desirable Requirements For The Role Include

• NIS / NIS2 knowledge
• Railway industry experience and TS 50701 Knowledge
• Understanding of Railway frameworks (e.g. EN 50126 / 9 or IEC 62278 and IEC 62425) and/or System engineering standards (e.g. ISO 15288, 12207, ...)