Senior Engineer (Cybersecurity)

About SYSTRA UK & Ireland

SYSTRA is a global specialist company dedicated to planning, designing, integrating, testing, commissioning, project managing, and delivering mass transit and mobility solutions. Their work supports over 50 million daily users worldwide as part of their mission to develop and modernize transport infrastructures with a focus on sustainability, accessibility, and innovation. With over 10,300 employees globally, including around 1,000 in the UK and Ireland, SYSTRA is expanding and seeking top talent to join their infrastructure design teams.

Role Context and Responsibilities

The cyber security team is growing within SYSTRA's Systems Engineering and Assurance discipline. The Senior or Principal Cybersecurity Engineer will collaborate closely with the Team Lead (Security and Software Assurance) to provide cybersecurity services throughout all project phases, from concept through operation and maintenance. Key duties include managing cybersecurity governance and lifecycle activities, contributing to evidence creation, supporting cybersecurity strategy development, maintaining client relationships to ensure needs are met, and adapting design solutions considering quality and costs.

The engineer will ensure compliance with cybersecurity standards, coordinate with other discipline teams and cybersecurity engineers, manage cybersecurity schedules and deliverables, participate in standards briefings, liaise with clients for effective communication, and review deliverables such as technical documents and tender preparations.

Required Qualifications and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Computer Science Engineering, or a related field.
• Minimum of three years of experience in Operational Technology (OT) cybersecurity and cybersecurity risk management.
• Capability to independently define and manage cybersecurity strategies and governance in OT environments.
• Experience with Threat Identification, Cybersecurity Risk Analysis, and Assessment for complex systems.
• Familiarity with major OT cybersecurity standards, particularly the IEC 62443 series.
• Ability to support supply chain management and conduct cybersecurity audits.
• Experience producing Zones and Conduits Partitioning Diagrams, defining cybersecurity requirements, and performing cybersecurity assurance.
• Knowledge of ISO 27005, NIST 800-82, and NIST 800-53 standards.

Preferred Knowledge

• Familiarity with NIS/NIS2 regulations.
• Experience in the railway industry and knowledge of TS 50701.
• Understanding of railway frameworks such as EN 50126/9, IEC 62278, IEC 62425, and system engineering standards like ISO 15288 and ISO 12207.