Product Security Specialist

We are looking for a Software Development or Systems Engineer with practical experience in the IEC 62443 standard or another cyber security standard/ EU Machinery Regulation (MR 2023/1230). We expect the person to have experience in IT/OT systems. A suitable candidate should have the ability to understand the client's business, products, and related cybersecurity needs and consult clients and support development teams.

Your work will be focused on the following:

• Advising and consulting clients in the field of Device security and compliance with IEC 62443 and other related standards and the EU Cyber Resilience Act (CRA).

• Component/system cybersecurity risk assessment.

• Threat modelling & secure architecture review.

• Embedded Software Development to meet IEC62443-4-2 compliance.

• Cross-Functional Collaboration: translate complex regulatory and engineering language into actionable tasks/goals and brief the executive team on compliance risks.

You'll Excel in This Role If You Have:

• Experience working with a cybersecurity standard or framework like: (NIS2, NIST Cybersecurity Framework, IEC 62443 series, ISO/IEC 27001 & 27002).

• Technical Literacy: a solid understanding of the Software Development Life Cycle (SDLC) and how hardware/software vulnerabilities are exploited.

• Excellent spoken and written English (with the ability to explain "the why" behind compliance to technical and business stakeholders who have limited know-how of cybersecurity.

• Bachelor's degree in Computer Science or related field.

Nice to have skills:

• Understanding vulnerability management, EU CRA regulation, SBOM management. Vulnerability scanning solutions.

• Previous experience with C/C++

• Radio Equipment Directive (RED).

• Understanding of the Software Development Life Cycle (SDLC) and how hardware/software vulnerabilities are exploited.

• Estonian language.