Senior OT Cybersecurity Engineer IEC 62443

act digital; Lisboa; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

act digital is seeking an experienced Senior OT Cybersecurity Engineer to secure industrial systems and OT environments across a high-impact international project. The role focuses on embedding cybersecurity throughout the product lifecycle and ensuring security excellence in critical settings.

The ideal candidate will bring 6+ years in cybersecurity, proven OT experience, and hands-on IEC 62443 implementation.

Qualifications

• Minimum 6 years of experience in Cybersecurity.
• Proven experience in OT environments.
• Hands-on experience implementing IEC 62443 controls in industrial or OT product environments.
• Strong background in Product Security Lifecycle Management.
• Solid experience with Secure Development Lifecycle (SDLC) methodologies.
• Practical knowledge of Secure Coding Practices, Threat Modeling.
• Experience implementing Data Protection, Encryption, and Cryptographic security solutions.
• Experience in Vulnerability Management, Security Operations, and incident remediation.

Responsibilities

• Integrate cybersecurity requirements throughout the entire product development lifecycle.
• Support security activities from requirements definition through design, implementation, integration, and acceptance testing.
• Implement and maintain cybersecurity controls within OT and industrial environments.
• Conduct threat modeling and promote secure-by-design principles.
• Embed security practices within Secure Development Lifecycle (SDLC) processes.
• Implement data protection, encryption, and security control mechanisms.
• Execute vulnerability management and security operations activities.
• Collaborate with development, engineering, and cybersecurity teams to ensure compliance with security requirements.
• Engage directly with clients and cybersecurity stakeholders.
• Produce security documentation, recommendations, and compliance evidence.

Skills

Cybersecurity

OT environments

IEC 62443

Product Security Lifecycle

Secure SDLC

Threat Modeling

Secure Coding

Data Protection

Vulnerability Management

Security Operations

Client Interaction

Stakeholder Management

Communication Skills

Job description

We are looking for an experienced Senior OT Cybersecurity Engineer to join a high-impact international project focused on securing industrial systems, digital products, and Operational Technology (OT) environments. This role is ideal for professionals passionate about embedding cybersecurity throughout the entire product lifecycle and driving security excellence in critical industrial environments.

Work Model

Hybrid: 2 to 3 days per week onsite in Lisbon

English fluency is mandatory

Key Responsibilities

• Integrate cybersecurity requirements throughout the entire product development lifecycle.
• Support security activities from requirements definition through design, implementation, integration, and acceptance testing.
• Implement and maintain cybersecurity controls within OT and industrial environments.
• Conduct threat modeling and promote secure-by-design principles.
• Embed security practices within Secure Development Lifecycle (SDLC) processes.
• Implement data protection, encryption, and security control mechanisms.
• Execute vulnerability management and security operations activities.
• Collaborate with development, engineering, and cybersecurity teams to ensure compliance with security requirements.
• Engage directly with clients and cybersecurity stakeholders.
• Produce security documentation, recommendations, and compliance evidence.

Required Skills & Experience

• Minimum 6 years of experience in Cybersecurity.
• Proven experience working in Operational Technology (OT) environments.
• Hands-on experience implementing IEC 62443 controls in industrial or OT product environments.
• Strong background in Product Security Lifecycle Management, covering: Requirements Definition, Solution Design, Development & Implementation, Integration Testing, Acceptance Testing
• Solid experience with Secure Development Lifecycle (SDLC) methodologies.
• Practical knowledge of: Secure Coding Practices, Secure-by-Design Principles, Threat Modeling
• Hands-on experience implementing: Data Protection Controls, Encryption Mechanisms, Cryptographic Security Solutions
• Strong experience in: Vulnerability Management, Security Operations, Security Monitoring, Incident Analysis and Remediation
• Ability to interact directly with clients and cybersecurity decision-makers.
• Excellent communication and stakeholder management skills.

Nice to Have

• Experience within industrial, critical infrastructure, manufacturing, energy, or transportation sectors.
• Knowledge of OT/ICS architectures and protocols.
• Industry certifications in Cybersecurity or OT Security.
• Experience working in highly regulated environments.