Senior Engineer (Cybersecurity)

SYSTRA UK & Ireland; Newcastle (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

SYSTRA UK & Ireland is seeking a Senior or Principal Cyber Security Engineer to join their Cyber Security team in California. This role involves delivering cybersecurity solutions for rail and infrastructure projects, managing cybersecurity governance, and defining strategies.

The ideal candidate will bring a BSc in Cybersecurity or a related field and at least 3 years of experience in OT cyber security. Strong interpersonal skills and commercial awareness are vital for this position.

Qualifications

• At least 3 years' experience in OT cyber security and cyber security risk management.
• Ability to define and manage cyber security strategy.
• Experience in Threat Identification and Cyber Security Risk Management.

Responsibilities

• Deliver cybersecurity solutions to clients from the Concept phase to Operation.
• Support cybersecurity strategy definition.
• Review deliverables, including technical documents and reports.

Skills

OT cyber security

Cyber Security Risk Management

Threat Identification

Knowledge of IEC 62443

Cyber Security Audits

Education

BSc in Cybersecurity or related field

Job description

Context

We currently have an opportunity for a Senior or Principal Cyber Security Engineer to join our growing Cyber Security team within our Systems Engineering and Assurance discipline. This position will suit a committed and ambitious professional who can demonstrate strong leadership and interpersonal skills combined with commercial awareness and the ability to play their part in growing a dynamic high-performance team.

Missions / Main Duties

• Supporting the Team Lead (Cybersecurity and software assurance), you will deliver cybersecurity solutions to our rail & infrastructure clients on projects from the Concept phase up to the Operation and Maintenance Phase, managing the cybersecurity governance and lifecycle activities and actively contributing to the creation of relevant evidence.
• Supporting the Team Lead (Cybersecurity and software assurance) in cybersecurity strategy definition.
• Maintain good working relationships with clients and ensure that their requirements are being fulfilled by the business.
• Be able to adapt to design challenges and find workable solutions that take into account quality, cost and other disciplines.
• Ensure that all relevant cybersecurity standards are being met throughout the cybersecurity process and liaise with the other disciplines teams and other cybersecurity engineers if any issues are identified.
• Support the management of Cybersecurity schedules and deliverables.
• Attend standards briefings run by the Team Lead (Cybersecurity and software assurance) and assist if required.
• Liaise with clients and ensure their requirements are effectively communicated to the team.
• Review deliverables, including technical documents and reports and assist in the preparation of expressions of interest and tenders.

Profile / Skills

Essential Requirements For The Role Include

• BSc in Cybersecurity, BSc in Computer Science, BSc in Computer Science Engineering or similar
• At least 3 years’ experience in OT cyber security and cyber security risk management
• Ability to independently define and manage cyber security strategy/planning and establish the OT cyber security governance
• Experience in Threat Identification and Cyber Security Risk Management (Analysis and Assessment) for complex systems
• Working knowledge with the major OT cyber security standards (including IEC 62443 series)
• Ability to support supply chain management and perform cyber security audits
• Experience in producing Zones and Conduits Partitioning Diagrams, Cyber Security Requirements definition and cyber security Assurance
• ISO 27005 / NIST 800-82 / NIST 800-53 Knowledge

Desirable Requirements For The Role Include

• NIS / NIS2 knowledge
• Railway industry experience and TS 50701 Knowledge
• Understanding of Railway frameworks (e.g. EN 50126 / 9 or IEC 62278 and IEC 62425) and/or System engineering standards (e.g. ISO 15288, 12207, ...)