Senior OT Cybersecurity Engineer IEC 62443

act digital; Lisboa; Hybrid; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

act digital in Lisboa is seeking a Senior OT Cybersecurity Engineer to drive security across our industrial products and OT environments. The role emphasizes embedding cybersecurity throughout the product lifecycle and collaborating with cross-functional teams in an international project.

Ideal candidates bring at least 6 years in cybersecurity, hands-on OT experience, and strong knowledge of IEC 62443 and Secure Development Lifecycle practices; English fluency is mandatory in this hybrid

Qualifikationen

• Minimum 6 years of experience in cybersecurity.
• Hands-on OT experience in industrial environments.
• Experience implementing IEC 62443 controls.
• Proficient in Product Security Lifecycle Management.
• Experience with SDLC methodologies and secure development practices.

Aufgaben

• Integrate cybersecurity requirements throughout the product development lifecycle.
• Support security activities from requirements through design, implementation and testing.
• Implement and maintain cybersecurity controls in OT environments.
• Conduct threat modeling and promote secure-by-design principles.
• Embed security in SDLC processes and governance.
• Coordinate data protection and encryption measures.
• Lead vulnerability management and security operations activities.
• Collaborate with clients and cybersecurity stakeholders to ensure compliance.
• Produce security documentation and evidence for compliance.

Kenntnisse

Cybersecurity

OT environments

IEC 62443

Secure SDLC

Threat modeling

Secure coding practices

Data protection

Vulnerability management

Security operations

Client/stakeholder communication

Jobbeschreibung

We are looking for an experienced Senior OT Cybersecurity Engineer to join a high-impact international project focused on securing industrial systems, digital products, and Operational Technology (OT) environments. This role is ideal for professionals passionate about embedding cybersecurity throughout the entire product lifecycle and driving security excellence in critical industrial environments.

Work Model

Hybrid: 2 to 3 days per week onsite in Lisbon

English fluency is mandatory

Key Responsibilities

• Integrate cybersecurity requirements throughout the entire product development lifecycle.
• Support security activities from requirements definition through design, implementation, integration, and acceptance testing.
• Implement and maintain cybersecurity controls within OT and industrial environments.
• Conduct threat modeling and promote secure-by-design principles.
• Embed security practices within Secure Development Lifecycle (SDLC) processes.
• Implement data protection, encryption, and security control mechanisms.
• Execute vulnerability management and security operations activities.
• Collaborate with development, engineering, and cybersecurity teams to ensure compliance with security requirements.
• Engage directly with clients and cybersecurity stakeholders.
• Produce security documentation, recommendations, and compliance evidence.

Required Skills & Experience

• Minimum 6 years of experience in Cybersecurity.
• Proven experience working in Operational Technology (OT) environments.
• Hands-on experience implementing IEC 62443 controls in industrial or OT product environments.
• Strong background in Product Security Lifecycle Management, covering: Requirements Definition, Solution Design, Development & Implementation, Integration Testing, Acceptance Testing
• Solid experience with Secure Development Lifecycle (SDLC) methodologies.
• Practical knowledge of: Secure Coding Practices, Secure-by-Design Principles, Threat Modeling
• Hands-on experience implementing: Data Protection Controls, Encryption Mechanisms, Cryptographic Security Solutions
• Strong experience in: Vulnerability Management, Security Operations, Security Monitoring, Incident Analysis and Remediation
• Ability to interact directly with clients and cybersecurity decision-makers.
• Excellent communication and stakeholder management skills.

Nice to Have

• Experience within industrial, critical infrastructure, manufacturing, energy, or transportation sectors.
• Knowledge of OT/ICS architectures and protocols.
• Industry certifications in Cybersecurity or OT Security.
• Experience working in highly regulated environments.