Product Security Engineer - Cyber security - IEC 62443

Job Description Summary

Job Description

Essential Responsibilities

- Implement the secure development life cycle (SDL), including security assessment, threat modelling, requirements definition, security architecture and design, penetration testing and secure deployment guide.
- Participate in the development and delivery of competitive product cyber security solutions, to support targeted growth.
- Contribute in decisions related to technology choices and design, for alignment with the overall Grid Automation cyber security strategy and roadmap.
- Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other product security leads, domain architects and experts.
- Recommend and participate in the design and implementation of standards, tools, and methodologies in the research and development community of GEV Grid Automation.
- Develop and conduct relevant security training for various internal audience, such as product managers, software engineers and technical support.
- Implement the cyber security vulnerability and incident process, including vulnerability assessment, solution definition (in collaboration with the development team),



communication with external parties where applicable and drafting the security advisories.
- Knowledge of cyber asset protection regulations and standards affecting the utilities industry including NERC-CIP, NIST, IEC62443, IEC62351

Required Qualifications

- Bachelor's Degree from an accredited university in Engineering, Computer Science or Information Technology
- Extensive experience with cyber security, preferably in an Operational Technology (OT) environment.
- Experience with Telecom and Network Equipment (Routers, Switches, Firewalls)
- Experience with security technologies, such as
- LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG
- Encryption, TLS, RSA and code signing
- Experience with vulnerability assessment tools and penetration testing methodologies.

Desired Characteristics

- Symmetric and asymmetric cryptography and PKI infrastructure
- Cyber security certification (ex. ISC2, SANS, ISACA, CISSP)
- Experience with programing and scripting languages.
- Demonstrated knowledge and understanding of the TCP/IP network stack, communication protocols and applications, including Modbus, DNP3, IEC61850.
- Demonstrated experience with Linux, VxWorks and Windows operating systems including user

📌 Vigilante de seguridad movilidad - acuda (País Vasco)
🏢 Prosegur
📍 País Vasco