Product Security Specialist

We are looking for a Software Development or Systems Engineer with practical experience in the IEC 62443 standard. We expect the person to have experience in IT/OT systems. A suitable candidate should have the ability to understand the clients business products and related cybersecurity needs and consult clients and support development teams.

Your work will be focused on the following: 

• Advising and consulting clients in the field of Device security and compliance with IEC 62443 and other related standards and the EU Cyber Resilience Act (CRA).

• Component/system cybersecurity risk assessment.

• Threat modelling & secure architecture review.

• Embedded Software Development to meet IECcompliance.

• Cross-Functional Collaboration: translate complex regulatory and engineering language into actionable tasks/goals and brief the executive team on compliance risks.  

Qualifications :

Youll Excel in This Role If You Have: 

• Experience working with a cybersecurity standard or framework like: (NIS2 NIST Cybersecurity Framework IEC 62443 series ISO/IEC 27001 & 27002). 

• Technical Literacy: a solid understanding of the Software Development Life Cycle (SDLC) and how hardware/software vulnerabilities are exploited. 

• Excellent spoken and written English (with the ability to explain the why behind compliance to technical and business stakeholders who have limited know-how of cybersecurity.  

• Bachelors degree in Computer Science or related field. 

Additional Information :

Nice to have skills: 

• Understanding vulnerability management EU CRA regulation SBOM management. Vulnerability scanning solutions. 

• Previous experience with C/C  

• Radio Equipment Directive (RED). 

• Understanding of the Software Development Life Cycle (SDLC) and how hardware/software vulnerabilities are exploited. 

• Estonian language. 

Remote Work :

No

Employment Type :

Full-time