Cyber Security Engineer

Cyber Security Engineer

Zoetermeer, Netherlands (Head Office) | Full-time | Reports to Engineering Manager

Seas of Solutions is a maritime technology company dedicated to making every journey safer, smarter, and more sustainable. Through our brands Kannad Marine, McMurdo, and Netwave, we develop and deliver advanced IT and electronic systems, including Voyage Data Recorders (VDRs) and safety beacons, to customers worldwide.

We're looking for a Cyber Security Engineer to help embed security into our product development lifecycle for maritime safety equipment. You'll work at the intersection of engineering and regulatory compliance — translating cyber security regulations into concrete product requirements, and making sure those requirements are actually met through design, testing, and certification. You'll work closely with our software engineering team and our type approval / certification specialists, reporting into the R&D organization.

• Analyze applicable regulatory frameworks — in particular the EU Marine Equipment Directive (MED) and the EU Cyber Resilience Act (CRA) — and translate them into concrete, testable cyber security requirements for our products (EPIRBs, PLBs, VDRs, AIS transponders).
• Assess CRA applicability per product and configuration (including tools such as configuration/IR utilities), and maintain that assessment as regulations and product scope evolve.
• Define and maintain a cyber security requirements baseline covering secure design, secure boot, firmware update integrity, access control, and data protection appropriate to maritime safety-critical equipment.
• Liaise directly with notified bodies and type approval authorities on cyber security aspects of certification (MED/Wheelmark and related schemes), preparing and reviewing supporting documentation and evidence.
• Work closely with the software engineering team to review architectures and designs against security requirements, support secure coding practices, and help resolve findings from security testing and audits.
• Support vulnerability management and risk assessments across the product portfolio, including coordinating with hardware and firmware engineers on embedded/RF systems.
• Track evolving cyber security regulation and standards relevant to marine electronics and feed changes back into product requirements and the R&D process.
• Contribute cyber security input into the stage-gate/agile development process and project documentation (e.g. risk registers, compliance matrices).
• 3–5 years of experience in a cyber security engineering role, ideally covering requirements analysis, secure design/architecture review, or security testing.
• Working knowledge of at least one relevant regulatory or standards framework, e.g. the EU Cyber Resilience Act, IEC 62443, ISO/IEC 27001, or equivalent product security regulation - with a genuine interest in learning the maritime-specific frameworks (MED/Wheelmark, IEC 61097/61996 series) on the job.
• Solid understanding of embedded systems, firmware, or IoT security concepts (secure boot, firmware signing/update integrity, access control, encryption at rest/in transit).
• Comfortable reading and interpreting regulatory or standards text and turning it into engineering requirements a development team can implement and test against.
• Strong communication skills — able to liaise confidently with external certification bodies/notified bodies as well as internal software, firmware, and hardware engineers.
• Bachelor's or Master's degree either in Computer Science, Electrical/Electronic Engineering, Cyber Security, or a related field (or equivalent practical experience).
• Fluent in English, spoken and written; based in or willing to work from Zoetermeer, Netherlands.

Interested?

Click on the Apply button.

Claire Zijderveld

Netwave Systems BV (Part of Seas of Solutions)

Human Resources Manager

Recruitment agencies? Thank you for your interest, but we are sourcing all our candidates directly. We appreciate you trying anyway but please keep in mind that any unsolicited profiles you send us will be treated as direct applications.