Sr Product Security Engineer

Key Responsibilities

• Ensure embedded, connected, and radio-enabled products meet applicable IEC 62443 and/or EN 18031 security requirements.
• Establish and support secure-by-design practices across firmware, hardware, wireless interfaces, and cloud integrations.
• Contribute to product security activities throughout the complete product lifecycle, from initial concept to product development.
• Work closely with cross-functional and agile development teams to integrate cybersecurity requirements into product development activities.
• Support assessment and implementation of industrial cybersecurity requirements based on applicable standards and regulations.
• Perform and support threat modelling activities to identify potential security risks and attack vectors.
• Support penetration testing activities and security assessments for products and systems.
• Work with OT protocols including Modbus, DNP3, OPC, and Profinet.
• Work with OT systems including PLC, DCS, RTU, and SCADA.
• Utilize security testing and assessment tools such as OPENVAS and Metasploit.
• Contribute to research and technology innovation initiatives related to product security.
• Provide technical guidance and support to development teams on product cybersecurity requirements.
• Support team-building initiatives and demonstrate leadership capabilities in building and developing the security team.

Technical Requirements

• 8–10+ years of relevant industry experience.
• In-depth exposure to EU-CRA, IEC 62443, and/or EN 18031.
• Strong understanding of product cybersecurity and secure-by-design practices.
• Exposure to threat modelling and penetration testing.
• Knowledge and prior work experience with OT protocols such as Modbus, DNP3, OPC, and Profinet.
• Experience with OT systems including PLC, DCS, RTU, and SCADA.
• Exposure to penetration testing tools including OPENVAS and Metasploit.
• IEC 62443 and/or CISSP certification is desired.
• Strong leadership skills with the ability to build and support a team.