Cyber Security Engineer

Deep Sea Electronics Ltd
Hunmanby, UK
17 days ago
Apply on www.deepseaelectronics.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours

Tech stack

Agile Methodology Software System Penetration Testing C++ (Programming Language) Software Documentation Cyber Security Linux on Embedded Systems Network Security Remote Access Technology RS-485 Standard Software Engineering Information Technology Vulnerability Analysis

Job description

  • Contribute to the development and maintenance of the cybersecurity strategy and policies for development of products within DSE product range

  • Work cross functionally with other departments to ensure full coverage of the relevant cyber security regulations, including the EU Cyber Resiliency Act

  • Support product management in progressing cyber security initiatives on the product road map

  • Support the identification, assessment, and mitigation of cybersecurity risks associated with product development and deployment

  • Assist in the preparation of necessary documentation for compliance with IEC 62443 and related regulatory requirements

  • Ensure continuous alignment with industry regulations and frameworks related to industrial cybersecurity

  • Collaborate with engineering teams to integrate security features into product design and architecture

  • Advise on secure software development practices and secure by design principles

  • Support vulnerability assessments, threat modelling, and penetration testing efforts for product solutions

  • Support the implementation of secure remote access, network security, and secure communication protocols throughout the products

  • Support the response to cybersecurity incidents within the product development lifecycle, * Work with internal teams to implement lessons learned from security incidents and continuously improve security measures

  • Contribute to post-incident reviews and help develop preventative measures to mitigate future risks

  • Develop and share cybersecurity subject matter knowledge with internal stakeholders

  • Share cybersecurity best practice, emerging threats, and mitigation strategies with internal teams

  • Support senior team members in engaging with customers and regulatory bodies on cybersecurity requirements and concerns

3.0 Internal & External Relationships

  • Engineering Management team - assist with the implementation of cyber security projects

  • Test and Approvals department - assist with training and in the development of test programs and procedures for functional safety

  • Technical Support - assist technical support with more involved customer queries, and technical authoring support including review of security manuals

  • Commercial sales team - Support customer faces sales literature and promotion of cyber security awareness at DSE

Requirements

  • Attention to detail, able to work both individually as a part of a team and selfdiscipline required for software developing and testing.

  • Produce clear and concise software documentation.
  • High quality software development.
  • Ability to define and work to timescales.

5.0 Essential/Desirable Factors

Knowledge Essential: Desirable:

  • Good level of knowledge in C/C++ * Embedded Linux operating systems for embedded systems * IoT systems

  • Cyber security development * Electrical principles processes, including risk * Functional safety experience, assessment techniques alongside cyber security

  • Security protocols and techniques, * Cyber security standards, IEC encryption, key storage, secure boot 62443, EN18031 and trust zones.

  • Knowledge of RED and CRA regulations

  • Automotive cyber security standards R155, R156 and ISO 21434, * Familiar with stage gated / agile development approaches

  • Comfortable collaborating and communicating with embedded systems engineers and company executives alike, bridging the gap between technical and management

  • Ability to contribute to cyber risk analysis, pragmatically

  • Use to work to working to high levels of quality and accuracy standards.

  • Ability to translate requirements into a technical product specification

  • Used to work in a high-pace environment

  • Enthusiastic and optimistic

Experience Essential: Desirable:

  • Held a role focused on cyber security * Industrial protocols such as RS485, in embedded systems CAN

  • Worked practice of the relevant * Background in industrial control and standards automation products

  • Contribution to risk analysis, mitigations and translation of requirements

Qualifications Essential: Desirable:

  • BSC in computer science or related degree qualification

About the company

Deep Sea Electronics Ltd (DSE) are a leading UK electronics manufacture specialising in development of advanced control and automation products for the power generation and off highway vehicle markets. Our range of solutions include connected devices that are subject to the latest cybersecurity standards.

The Cyber Security Engineer will support the cyber security aspects of our products, working under the guidance of the Senior Cyber Security Manager. They will work closely with cross functional teams including engineering, operations and commercial to help ensure products meet regulatory compliance and industry best practices.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.deepseaelectronics.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

1:16 min

Securing internal pod communication with network security policies

Marc Nimmerrichter · World Congress 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

43 sec

Software engineering journey and local Manchester roots

Jonathan Tang · Coffee With Developers

4:19 min

Introduction to network security and endpoint monitoring architectures

Christoph Ruggenthaler · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all