security engineer in product cybersecurity

The company provides technology and information services, including cybersecurity expertise for product and software development environments.

• Coordinate cybersecurity activities across the Secure SDLC;
• Drive alignment with IEC 62443, particularly secure development lifecycle requirements;
• Manage product vulnerabilities, including CVE assessment, risk evaluation, remediation and tracking;
• Embed DevSecOps practices and security tooling into CI/CD pipelines;
• Onboard and support new colleagues in the DevSecOps environment, including access, tooling, workflows and security processes;
• Coordinate threat modelling, security reviews, vulnerability assessments and penetration testing;
• Define security requirements and quality gates, supporting engineering teams with implementation and remediation;
• Maintain security documentation and evidence for governance, customer and certification requirements;
• Work across Engineering, DevOps, Product Management and Cybersecurity to ensure security actions are owned and delivered.

• Experience in product/software or OT cybersecurity;
• Strong understanding of IEC 62443, ideally 62443-4-1/4-2;
• Knowledge of Secure SDLC, DevSecOps and vulnerability management;
• Familiarity with SAST, SCA, DAST and CI/CD security tooling;
• Ability to support colleagues with DevSecOps tooling, environments and secure development processes;
• Strong stakeholder coordination and communication skills;
• Nice to have: experience in energy, industrial automation or critical infrastructure.

• Contract for 6 months with extensions; part of a 3-year project;
• Start date: ASAP.