04 ago - Turbigo
idpp
Cybersecurity Expert Developer / Owner (Industrial Embedded Systems)
Scorra verso il basso per una panoramica approfondita di questo lavoro e dei requisiti per i candidati. Invii la sua candidatura facendo clic sul pulsante "Candidati".
We are seeking a Cybersecurity Expert Developer / Owner (Industrial Embedded Systems) to act as the primary cybersecurity authority across a critical portfolio of switchgear and industrial control systems.
This role combines hands‑on embedded software expertise with cybersecurity architecture ownership, ensuring products are secure by design, compliant with IEC 62443-4-2, and aligned with the EU Cyber Resilience Act (CRA) across the full product lifecycle.
Key Responsibilities
-
- Act as the primary cybersecurity reference across the industrial product portfolio.
- Define, review, and continuously improve cybersecurity architecture and practices.
- Ensure full alignment with IEC 62443-3-4-2 and EU Cyber Resilience Act (CRA) requirements.
- Support discussions with cybersecurity auditors and clearly explain technical implementations.
- Collaborate with developers, architects, and product owners to embed security requirements.
- Implement and promote secure communication, authentication, and system hardening practices.
- Propose practical cybersecurity improvements aligned with real‑world industry usage.
- Support containerised and Linux‑based embedded environments (e.g. Docker‑based systems).
- Own end‑to‑end vulnerability and patch management processes.
- Manage and maintain SBOM (Software Bill of Materials) across products.
- Track CVEs, dependencies, and security advisories.
- Ensure timely patching and coordination of security updates across releases.
- Maintain cybersecurity documentation for audits, customers, and internal governance.
- Ensure security is embedded across design, development, testing, and release phases.
- Provide evidence and artefacts for compliance and certification.
- Analyse and interpret customer cybersecurity requirements.
- Translate compliance and security requirements into actionable technical tasks.
- Support global stakeholders including product, engineering, and application teams.
Required Skills & Experience
-
- Strong programming experience in C++, C#, Python, and scripting (Bash / PowerShell).
- Experience with Linux‑based embedded systems.
- Understanding of distributed / service‑based architecture.
- Experience with Docker or containerised deployments.
- Proven experience in industrial, embedded, or IoT cybersecurity environments.
- Strong understanding of secure communication and key management.
- System hardening techniques.
- Working knowledge of ISO/IEC 27001 and IEC 62443 standards.
- Experience managing CVEs, security advisories, and vulnerability lifecycles. xysqume
- Strong background in security patching.
#J-18808-Ljbffr
06 ago - Torino
ITConsulting
06 ago - Reggio Emilia
K2 Partnering Solutions
06 ago - Torino
ITConsulting
06 ago - Cagliari
K2 Partnering Solutions