Senior OT Cybersecurity Engineer IEC 62443

act digital; Lisboa; Híbrido; EUR 90 000 - 120 000; Tempo integral

Resumo da oferta

act digital is seeking a Senior OT Cybersecurity Engineer to help secure industrial systems and OT environments. The role emphasizes embedding cybersecurity throughout the product lifecycle and working with a multinational team on high-impact projects.

The candidate should have extensive experience in OT, IEC 62443, and secure development practices, with strong communication to stakeholders and clients alike.

Qualificações

• 6+ years of cybersecurity experience
• Experience in OT environments
• Hands-on IEC 62443 controls in industrial/OT contexts
• Strong Product Security Lifecycle Management background
• Solid SDLC methodologies experience
• Knowledge of Secure Coding, Secure-by-Design, Threat Modeling

Responsabilidades

• Integrate cybersecurity requirements across the product development lifecycle
• Support security activities from requirements to acceptance testing
• Implement and maintain cybersecurity controls in OT/industrial environments
• Conduct threat modeling and promote secure-by-design
• Embed security in Secure Development Lifecycle processes
• Implement data protection and encryption controls
• Perform vulnerability management and security operations
• Collaborate with development, engineering and cybersecurity teams to meet security requirements
• Engage with clients and cybersecurity stakeholders
• Produce security documentation, recommendations, and compliance evidence

Conhecimentos

Cybersecurity

OT environments

IEC 62443

Product Security Lifecycle

SDLC

Secure Coding

Secure-by-Design

Threat Modeling

Data Protection

Encryption

Cryptographic Security

Vulnerability Management

Security Operations

Security Monitoring

Incident Remediation

Client Interaction

Stakeholder Management

Descrição da oferta de emprego

We are looking for an experienced Senior OT Cybersecurity Engineer to join a high-impact international project focused on securing industrial systems, digital products, and Operational Technology (OT) environments. This role is ideal for professionals passionate about embedding cybersecurity throughout the entire product lifecycle and driving security excellence in critical industrial environments.

Work Model

Hybrid: 2 to 3 days per week onsite in Lisbon

English fluency is mandatory

Key Responsibilities

• Integrate cybersecurity requirements throughout the entire product development lifecycle.
• Support security activities from requirements definition through design, implementation, integration, and acceptance testing.
• Implement and maintain cybersecurity controls within OT and industrial environments.
• Conduct threat modeling and promote secure-by-design principles.
• Embed security practices within Secure Development Lifecycle (SDLC) processes.
• Implement data protection, encryption, and security control mechanisms.
• Execute vulnerability management and security operations activities.
• Collaborate with development, engineering, and cybersecurity teams to ensure compliance with security requirements.
• Engage directly with clients and cybersecurity stakeholders.
• Produce security documentation, recommendations, and compliance evidence.

Required Skills & Experience

• Minimum 6 years of experience in Cybersecurity.
• Proven experience working in Operational Technology (OT) environments.
• Hands-on experience implementing IEC 62443 controls in industrial or OT product environments.
• Strong background in Product Security Lifecycle Management, covering: Requirements Definition, Solution Design, Development & Implementation, Integration Testing, Acceptance Testing
• Solid experience with Secure Development Lifecycle (SDLC) methodologies.
• Practical knowledge of: Secure Coding Practices, Secure-by-Design Principles, Threat Modeling
• Hands-on experience implementing: Data Protection Controls, Encryption Mechanisms, Cryptographic Security Solutions
• Strong experience in: Vulnerability Management, Security Operations, Security Monitoring, Incident Analysis and Remediation
• Ability to interact directly with clients and cybersecurity decision-makers.
• Excellent communication and stakeholder management skills.

Nice to Have

• Experience within industrial, critical infrastructure, manufacturing, energy, or transportation sectors.
• Knowledge of OT/ICS architectures and protocols.
• Industry certifications in Cybersecurity or OT Security.
• Experience working in highly regulated environments.