> Markdown version of [/jobs/ext/3411173-product-security-engineer-cyber-security-iec-62443](https://www.wearedevelopers.com/jobs/ext/3411173-product-security-engineer-cyber-security-iec-62443). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Product Security Engineer - Cyber security - IEC 62443 - **Company:** GE Vernova - **Location:** Vizcaya, Spain - **Salary:** €126,000.0 - €176,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Software System Penetration Testing, Public-Key Cryptography, Communications Protocols, Cyber Security, Computer Programming, Linux, Networking Hardware, Information Systems Security Architecture Professional, Lightweight Directory Access Protocols (LDAP), Modbus, Public Key Infrastructure, RSA (Cryptosystem), Software Requirements Analysis, Syslog, TCP/IP, VxWorks, Network Routers, Scripting, Transport Layer Security, File Transfer Protocol (FTP), Software Security, Firewalls (Computer Science), Information Technology, Patch Management, Operational Systems, User Administration, Vulnerability Analysis - **Published:** September 30, 2026 - **Apply:** https://dejobs.org/x/x/F81B7BEA384543558AC884B9BB95A8ED/job/ ## About the Role * Bachelor's Degree from an accredited university in Engineering, Computer Science or Information Technology * Extensive experience with cyber security, preferably in an Operational Technology (OT) environment. * Experience with Telecom and Network Equipment (Routers, Switches, Firewalls) * Experience with security technologies, such as * LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG * Encryption, TLS, RSA and code signing * Experience with vulnerability assessment tools and penetration testing methodologies., * Symmetric and asymmetric cryptography and PKI infrastructure * Cyber security certification (ex. ISC2, SANS, ISACA, CISSP) * Experience with programing and scripting languages. * Demonstrated knowledge and understanding of the TCP/IP network stack, communication protocols and applications, including Modbus, DNP3, IEC61850. * Demonstrated experience with Linux, VxWorks and Windows operating systems including user account management, security / system hardening, device control, and patch management. * Excellent customer service mind-set * Demonstrated ability to lead programs / projects. Ability to document, plan, market, and execute programs. Established project management skills. * Excellent oral and written communications skills in English * Ability to work effectively in a team and across functions, partnering with other teams in a worldwide environment ## Description * Implement the secure development life cycle (SDL), including security assessment, threat modelling, requirements definition, security architecture and design, penetration testing and secure deployment guide. * Participate in the development and delivery of competitive product cyber security solutions, to support targeted growth. * Contribute in decisions related to technology choices and design, for alignment with the overall Grid Automation cyber security strategy and roadmap. * Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other product security leads, domain architects and experts. * Recommend and participate in the design and implementation of standards, tools, and methodologies in the research and development community of GEV Grid Automation. * Develop and conduct relevant security training for various internal audience, such as product managers, software engineers and technical support. * Implement the cyber security vulnerability and incident process, including vulnerability assessment, solution definition (in collaboration with the development team), communication with external parties where applicable and drafting the security advisories. * Knowledge of cyber asset protection regulations and standards affecting the utilities industry including NERC-CIP, NIST, IEC62443, IEC62351 ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)