Embedded Cybersecurity Engineer

Cybersecurity Expert Developer / Owner (Industrial Embedded Systems)

We are seeking a Cybersecurity Expert Developer / Owner (Industrial Embedded Systems) to act as the primary cybersecurity authority across a critical portfolio of switchgear and industrial control systems.

This role combines hands‑on embedded software expertise with cybersecurity architecture ownership, ensuring products are secure by design, compliant with IEC 62443-4-2, and aligned with the EU Cyber Resilience Act (CRA) across the full product lifecycle.

Key Responsibilities

• Act as the primary cybersecurity reference across the industrial product portfolio.
• Define, review, and continuously improve cybersecurity architecture and practices.
• Ensure full alignment with IEC 62443-3-4-2 and EU Cyber Resilience Act (CRA) requirements.
• Support discussions with cybersecurity auditors and clearly explain technical implementations.
• Collaborate with developers, architects, and product owners to embed security requirements.
• Implement and promote secure communication, authentication, and system hardening practices.
• Propose practical cybersecurity improvements aligned with real‑world industry usage.
• Support containerised and Linux‑based embedded environments (e.g. Docker‑based systems).
• Own end‑to‑end vulnerability and patch management processes.
• Manage and maintain SBOM (Software Bill of Materials) across products.
• Track CVEs, dependencies, and security advisories.
• Ensure timely patching and coordination of security updates across releases.
• Maintain cybersecurity documentation for audits, customers, and internal governance.
• Ensure security is embedded across design, development, testing, and release phases.
• Provide evidence and artefacts for compliance and certification.
• Analyse and interpret customer cybersecurity requirements.
• Translate compliance and security requirements into actionable technical tasks.
• Support global stakeholders including product, engineering, and application teams.

Required Skills & Experience

• Strong programming experience in C++, C#, Python, and scripting (Bash / PowerShell).
• Experience with Linux‑based embedded systems.
• Understanding of distributed / service‑based architecture.
• Experience with Docker or containerised deployments.
• Proven experience in industrial, embedded, or IoT cybersecurity environments.
• Strong understanding of secure communication and key management.
• System hardening techniques.
• Working knowledge of ISO/IEC 27001 and IEC 62443 standards.
• Experience managing CVEs, security advisories, and vulnerability lifecycles.
• Strong background in security patching.