Senior Engineer - Cybersecurity

About SYSTRA

SYSTRA is a global leader in the planning, design, integration, testing, commissioning, project management, and delivery of mass transit and mobility solutions. Trusted by over 50 million daily users worldwide, SYSTRA has a 60-year legacy of advancing urban and regional transport infrastructure with a strong emphasis on sustainability, accessibility, and innovation. The company employs more than 10,300 people globally and about 1,000 across the UK and Ireland and is actively expanding its team.

Role Context

We are seeking a Senior or Principal Cybersecurity Engineer to join our expanding Cybersecurity team within the Systems Engineering and Assurance discipline. This position is ideal for a dedicated, ambitious professional with proven leadership and interpersonal skills, commercial awareness, and the ability to contribute to the growth of a dynamic, high-performing team.

Main Responsibilities

• Collaborate closely with the Team Lead for Security and Software Assurance to deliver cybersecurity solutions to rail and infrastructure clients throughout all project phases from Concept to Operation and Maintenance.
• Manage cybersecurity governance, lifecycle activities, and contribute to producing requisite evidence.
• Support definition and implementation of cybersecurity strategies.
• Maintain strong client relationships ensuring their requirements are efficiently met by the business.
• Adapt to design challenges and formulate practical solutions considering quality, cost, and multidisciplinary factors.
• Ensure compliance with relevant cybersecurity standards during all stages of the cybersecurity process and coordinate with other disciplines and cybersecurity engineers to resolve issues.
• Assist in managing schedules and deliverables related to cybersecurity tasks.
• Participate in standards briefings organized by the Team Lead and provide assistance as needed.
• Communicate client requirements clearly to the team.
• Review technical documents and reports, and assist in preparing expressions of interest and tender documents.

Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Science Engineering, or a related field.
• Minimum of 3 years’ experience in Operational Technology (OT) cybersecurity and cybersecurity risk management.
• Proven ability to independently define and implement cybersecurity strategies and establish OT cybersecurity governance frameworks.
• Expertise in threat identification and performing cybersecurity risk analyses and assessments for complex systems.
• Familiarity with key OT cybersecurity standards, especially the IEC 62443 series.
• Competence in supporting supply chain management and conducting cybersecurity audits.
• Experience creating zones and conduits partitioning diagrams, defining cybersecurity requirements, and ensuring cybersecurity assurance.
• Knowledge of ISO 27005, NIST SP 800-82, and NIST SP 800-53 frameworks.

Desirable Skills

• Knowledge of Network and Information Systems (NIS / NIS2) regulations.
• Experience within the railway industry and familiarity with TS 50701 standard.
• Understanding of railway frameworks such as EN 50126, EN 50129, IEC 62278, IEC 62425, and systems engineering standards including ISO 15288 and ISO 12207.