Senior Engineer (Cybersecurity)

SYSTRA UK & Ireland; Leeds; On-site; GBP 60,000 - 80,000; Full time

Job summary

SYSTRA UK & Ireland is looking for a Senior or Principal Cyber Security Engineer to join the Cyber Security team in Leeds. The position requires strong leadership and interpersonal skills to deliver cybersecurity solutions.

The candidate will manage cybersecurity governance and maintain relationships with rail and infrastructure clients while ensuring compliance with cybersecurity standards. Essential qualifications include a BSc in Cybersecurity and 3+ years of relevant experience.

Qualifications

• 3+ years’ experience in OT cyber security and cyber security risk management.
• Ability to define and manage cyber security strategy/planning.
• Experience in Threat Identification and cyber security audits.

Responsibilities

• Deliver cybersecurity solutions to rail & infrastructure clients.
• Manage cybersecurity governance and lifecycle activities.
• Maintain relationships with clients to fulfill their requirements.

Skills

Cybersecurity strategy definition

Cyber security risk management

Threat Identification

OT Cybersecurity standards

Supply chain management

Education

BSc in Cybersecurity or related field

Tools

IEC 62443 series

ISO 27005

NIST standards

Job description

Context

We currently have an opportunity for a Senior or Principal Cyber Security Engineer to join our growing Cyber Security team within our Systems Engineering and Assurance discipline. This position will suit a committed and ambitious professional who can demonstrate strong leadership and interpersonal skills combined with commercial awareness and the ability to play their part in growing a dynamic high-performance team.

Missions / Main Duties

• Supporting the Team Lead (Cybersecurity and software assurance), you will deliver cybersecurity solutions to our rail & infrastructure clients on projects from the Concept phase up to the Operation and Maintenance Phase, managing the cybersecurity governance and lifecycle activities and actively contributing to the creation of relevant evidence.
• Supporting the Team Lead (Cybersecurity and software assurance) in cybersecurity strategy definition.
• Maintain good working relationships with clients and ensure that their requirements are being fulfilled by the business.
• Be able to adapt to design challenges and find workable solutions that take into account quality, cost and other disciplines.
• Ensure that all relevant cybersecurity standards are being met throughout the cybersecurity process and liaise with the other disciplines teams and other cybersecurity engineers if any issues are identified.
• Support the management of Cybersecurity schedules and deliverables.
• Attend standards briefings run by the Team Lead (Cybersecurity and software assurance) and assist if required.
• Liaise with clients and ensure their requirements are effectively communicated to the team.
• Review deliverables, including technical documents and reports and assist in the preparation of expressions of interest and tenders.

Profile / Skills

Essential Requirements For The Role Include

• BSc in Cybersecurity, BSc in Computer Science, BSc in Computer Science Engineering or similar
• At least 3 years’ experience in OT cyber security and cyber security risk management
• Ability to independently define and manage cyber security strategy/planning and establish the OT cyber security governance
• Experience in Threat Identification and Cyber Security Risk Management (Analysis and Assessment) for complex systems
• Working knowledge with the major OT cyber security standards (including IEC 62443 series)
• Ability to support supply chain management and perform cyber security audits
• Experience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security Assurance
• ISO 27005 / NIST 800-82 / NIST 800-53 Knowledge

Desirable Requirements For The Role Include

• NIS / NIS2 knowledge
• Railway industry experience and TS 50701 Knowledge
• Understanding of Railway frameworks (e.g. EN 50126 / 9 or IEC 62278 and IEC 62425) and/or System engineering standards (e.g. ISO 15288, 12207, ...)