Cyber Security Engineer

- Engaging with clients security teams to understand their wider security strategy, including processes, assurance evidence, and risk appetite. - Specification and maintenance of security requirements for projects, including support for meeting international and regional security standards and regulations (NIS, NIS2, EU CRA, IEC 62443, TS 50701). - Creating clear and efficient Cyber Security Management Plans and monitoring progress against those plans (time, budget, and quality). - Developing architectures that compartmentalise systems into zones and conduits and identifying security controls required to provide adequate protection. - Planning and performing threat and risk analysis and defining countermeasures in line with organisational risk acceptance criteria. - Evaluation of third-party components against product and solution security requirements. - Compilation and review of security-related artefacts produced during development and engineering activities. - Verification of implementation against security requirements (e.g., system testing, factory acceptance testing, site acceptance testing). - Validation activities (e.g., penetration testing) to ensure implementations meet customer security expectations, identify vulnerabilities, and assess remediation effectiveness. - Supporting the development of product and solution security competencies within project teams. - Representing security engineering at project milestones and stage-gate reviews. - Collecting security-related lessons learned to support continuous improvement. - Involvement in the analysis and response to security vulnerabilities and incidents. - Maintaining awareness of new technologies, emerging risks, and evolving standards, and applying this knowledge to ongoing deliveries.