Senior OT Cybersecurity Engineer

Aubay; Porto; Hybrid; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Training Academy

Career advancement

Mental health support

Job summary

Aubay Portugal is hiring for a cybersecurity professional focusing on OT/ICS security. You will implement IEC 62443 controls within OT product environments and embed security across the development lifecycle, from requirements to testing.

You will conduct threat modeling, apply secure coding practices, and oversee data protection strategies and vulnerability management in product/OT contexts. Fluency in English is essential.

Qualifications

• 6+ years of proven experience in Cybersecurity with a focus on OT/ICS Security.
• Hands-on implementing IEC 62443 controls.
• Expertise in Secure Development Lifecycle including threat modeling and secure coding.
• Experience in data protection, encryption, and vulnerability management strategies.
• English proficiency is mandatory.

Responsibilities

• Implement and integrate IEC 62443 controls within OT product environments.
• Embed security practices across the product development lifecycle from requirements to testing.
• Conduct threat modeling at design stage and apply secure coding practices.
• Deploy and manage data protection and encryption mechanisms in product/OT contexts.
• Oversee vulnerability management and lead daily security operations.

Skills

OT/ICS Security

IEC 62443 Controls

Secure SDLC/SSDLC

Threat Modeling

Data Protection & Encryption

Vulnerability Management

English Proficiency

Job description

At Aubay Portugal, we work daily with some of the largest organisations across sectors such as banking, insurance, telecommunications and energy, helping to build and evolve critical systems that support millions of users. We have been in Portugal since 2007 and are part of an international group with a presence in several European countries. More than technology, we build close relationships and deliver real-impact projects.

What will you do?

• Implement and integrate IEC 62443 controls within industrial and Operational Technology (OT) product environments;
• Embed comprehensive security practices throughout the entire product development lifecycle, from requirements definition to acceptance testing;
• Conduct robust threat modeling at the design stage and ensure the application of secure coding practices;
• Deploy and manage effective data protection and encryption mechanisms in product and OT contexts;
• Oversee vulnerability management processes and lead day-to-day security operations activities.

What are we looking for?

At Aubay, our focus is on professionals who bring both technical expertise and the right mindset:

• A minimum of 6 years of proven experience in Cybersecurity, with a strong focus on OT/ICS Security;
• Demonstrable hands-on experience with the practical implementation of IEC 62443 controls;
• Solid expertise in Secure Development Lifecycle (SDLC/SSDLC), including threat modeling and secure coding methodologies;
• Practical experience in implementing robust data protection, encryption, and vulnerability management strategies;
• Proficiency in English is mandatory;
• Alignment with our corporate culture and a commitment to integrity and ethics are highly valued;
• Strong customer focus, teamwork, task prioritisation, and daily commitment are highly appreciated.

What can we offer?

At Aubay, we invest in your development and well-being:

• Continuous growth through our Training Academy, with technical and soft skills training, mentoring, tech communities, workshops and in-person meetups;
• Close support with regular feedback and a structured career advancement model;
• Comprehensive health insurance, including dental coverage, as well as access to a mental health platform and well-being initiatives;
• Team-oriented environment, including events and initiatives to promote connection and team spirit;
• Personal and family life support, from the moment your children are born and throughout their educational path;
• Access to a language platform with conversational classes in multiple languages;
• Project-tailored work model: hybrid (2-3 days a week).

What will you find here?

• A close-knit and informal environment, where direct communication is preferred and people are valued;
• Recognition of your contribution, with initiatives that celebrate meaningful moments;
• Freedom to be yourself, without unnecessary formalities;
• Teams where knowledge sharing, collaboration and joint growth are a reality.

Personal Data collected by AUBAY PORTUGAL as Data Controller, regarding the identification, contact and professional capabilities of the candidates, in the present procedure, will be processed for the application analysis, having in consideration that the processing is conducted in order to take the steps, at the request of the data subject, prior to entering into a contract; Personal data sent through the present application will be kept by Aubay during the application procedure and will remain stored whilst updated (for two years period). The collected data might be transferred or include other processing activities, as long as the data subject is informed, in the occurrence of a standard application and selection procedure, for the compliance of legal obligations for the time required by law. For any queries or request regarding personal data protection rights, the Data Subject may contact AUBAY PORTUGAL's headquarters in Avenida Duque D'Ávila, nº46 em Lisboa or use the DPO's e-mail - [e-mail]. The Data Subject also has the right to file a complaint with the National Data Protection Authority – www.cnpd.pt. (please do not include data regarding racial or ethnical origins, political opinions, religion, philosophy, biometrical data, health data, sexual life and orientation, or relating to criminal convictions and offences.)