PRODUCT CYBERSECURITY ENGINEER

Description

Job Summary: Ingeteam is seeking a Product Cybersecurity Engineer to integrate security across the product lifecycle and ensure regulatory compliance. Key Highlights: 1. Integration into the Ingeteam Research Institute for product security. 2. Collaboration with R&D teams on security-by-design. 3. Contribution to the energy model transition and triple sustainability. Ingeteam, a leading company specializing in electrical engineering and the development of electrical equipment, motors, generators, and frequency converters, seeks to hire a Product Cybersecurity Engineer at its Zamudio facilities. You will join the Ingeteam Research Institute within the Digital Transformation Department, with the mission of integrating security across our product lifecycle and ensuring compliance with applicable regulations and standards. The selected candidate will work closely with R&D teams from business units, driving security from design through to product operation. Key Functions and Responsibilities: \-Collaborate with engineering and development teams to incorporate cybersecurity requirements into the **product development lifecycle**, aligned with standards such as **IEC 62443\-4\-1** and industry best practices. * Conduct risk analysis and threat modeling for products and systems. * Participate in identifying and analyzing cybersecurity risks for products, including threat modeling and defining security requirements. * Analyze and adapt products to **applicable regulations and regulatory frameworks**, such as the **Cyber Resilience Act (CRA)**. \-Support product security certification and evaluation processes (e.g., IEC 62443\-4\-2). * Manage the product vulnerability management process, including identification, assessment, prioritization, and coordination of remediation. * Coordinate or participate in **security evaluations and testing**, such as architecture reviews, code analysis, or penetration testing. * Collaborate in defining security requirements for new products and features, ensuring correct implementation by development teams. * Collaborate in **responding to product-related security incidents** and associated technical communication. * Support technical and business teams in **responding to customer cybersecurity requirements**. Minimum Requirements: * University degree in Computer Engineering, Telecommunications Engineering, Cybersecurity, or related fields. * Advanced level of English. * \+3 years of experience in cybersecurity. * Knowledge of the **IEC 62443\-4\-1 and/or IEC 62443\-4\-2** standards and experience in product security evaluation processes. Preferred Qualifications: * Master’s or postgraduate degree in Cybersecurity or Information Security. * Familiarity with the **Cyber Resilience Act (CRA)** and other regulations applicable to digital products. * Knowledge of **networks and communication protocols**, especially in industrial environments. * Experience in product vulnerability management and lifecycle tracking, security advisory management, and coordination with PSIRT. * Experience in **Secure Development Lifecycle (SDL)** or secure development. * Experience in **product pentesting or security testing**. * Knowledge of **embedded systems, firmware, or device architecture**. * Experience in **OT environments or industrial systems**, or knowledge in this domain. What We Offer: * Join an innovative, market-leading organization in Power Electronics, contributing to the energy model transition and impacting triple sustainability (social, environmental, and economic). * Flexible working hours and other work-life balance benefits. * Compensation commensurate with the candidate’s experience. * Permanent employment contract. * Integration into a young, dynamic, and technologically advanced team. At Ingeteam, we value diversity and facilitate the inclusion of persons with disabilities. Therefore, if you meet the general requirements for this position and hold a disability certificate indicating a disability level of 33% or higher, Ingeteam will positively consider your application. \#LI\-TP1