Security Engineer

About the company Our client is an established, international technology company and a great organisation to work for. They design and build safety-critical connected hardware that customers worldwide rely on when it matters most. Quality, reliability and security are at the heart of everything they make.The role New European regulation, particularly the EU Cyber Resilience Act, is changing how manufacturers build connected products. Our client is looking for a Cyber Security Engineer to embed security into their product development lifecycle.You will turn regulation into engineering. That means reading frameworks such as the Cyber Resilience Act (CRA) and other applicable product regulation, translating them into concrete, testable requirements, and making sure those requirements are met through design, testing and certification. You will work closely with software, firmware and hardware engineers, as well as the company's certification specialists. You will report into the R&D organisation.What you will do

• Analyse the CRA and related frameworks, and translate them into clear security requirements for the product portfolio.
• Assess CRA applicability per product and configuration, and keep that assessment up to date as regulation and products evolve.
• Build and maintain a security requirements baseline covering secure design, secure boot, firmware update integrity, access control and data protection.
• Act as the security point of contact for notified bodies and certification authorities, preparing and reviewing certification evidence.
• Review architectures and designs with the engineering team, support secure coding practices and help resolve findings from testing and audits.
• Support vulnerability management and risk assessments, including on embedded systems.
• Follow developments in cyber security regulation and standards, and feed them back into the R&D process.What you bring
• 3 to 5 years of experience in cyber security engineering, for example in requirements analysis, secure architecture review or security testing.
• Working knowledge of at least one relevant framework, such as the Cyber Resilience Act, IEC 62443, ISO/IEC 27001 or comparable product security regulation.
• A solid understanding of embedded, firmware or IoT security: secure boot, firmware signing, update integrity, access control and encryption.
• The ability to read regulatory or standards text and turn it into requirements a development team can build and test against.
• Strong communication skills, both with external certification bodies and with internal engineers.
• A Bachelor's or Master's degree in Computer Science, Electrical Engineering, Cyber Security or a related field, or equivalent practical experience.
• Fluent English, spoken and written. Dutch is not required.What's on offer
• Meaningful work on technology that people genuinely depend on.
• Hands-on experience with CRA implementation and certification, one of the most in-demand skill sets in European product security right now.
• A multidisciplinary R&D team spanning software, firmware and hardware.
• A stable, established company with an international customer base.
• A market-competitive salary and pension scheme.
• A diverse and inclusive working environment.Please note This role is based in Zuid-Holland. Applicants must already hold the right to work in the Netherlands, as our client is unable to offer visa sponsorship.Interested? Send your CV to Tergos, or get in touch for a confidential conversation about the role. We specialise exclusively in permanent cybersecurity placements in Zuid-Holland, and we're happy to tell you more.

Our sales consultants each focus on one IT Infrastructure or Cyber Security expertise, one specific type of employment and one particular region. Thanks to this triple focus, they know all relevant organisations within their focus area. As a result, they quickly find your best match.