Salary: £19,200 - 28,800 per year Requirements: Educated to degree level (or equivalent) in an engineering, scientific, or numerate discipline. Experience providing security engineering leadership in demanding Operational Technology environments. Proven practical experience applying the IEC 62443 standard series. Understanding and practical experience of applying CENELEC standards. Preferably holding at least one of the following certifications: CISSP, CSSLP, or CESG Certified Professional (CCP). Experience mentoring and developing other engineers. Excellent communication skills with the ability to influence both internal and external stakeholders. Responsibilities: Engaging with clients security teams to understand their wider security strategy, including processes, assurance evidence, and risk appetite. Specification and maintenance of security requirements for projects, including support for meeting international and regional security standards and regulations (NIS, NIS2, EU CRA, IEC 62443, TS 50701). Creating clear and efficient Cyber Security Management Plans and monitoring progress against those plans (time, budget, and quality). Developing architectures that compartmentalise systems into zones and conduits and identifying security controls required to provide adequate protection. Planning and performing threat and risk analysis and defining countermeasures in line with organisational risk acceptance criteria. Evaluation of third-party components against product and solution security requirements. Compilation and review of security-related artefacts produced during development and engineering activities. Verification of implementation against security requirements (e.g., system testing, factory acceptance testing, site acceptance testing). Validation activities (e.g., penetration testing) to ensure implementations meet customer security expectations, identify vulnerabilities, and assess remediation effectiveness. Supporting the development of product and solution security competencies within project teams. Representing security engineering at project milestones and stage-gate reviews. Collecting security-related lessons learned to support continuous improvement. Involvement in the analysis and response to security vulnerabilities and incidents. Maintaining awareness of new technologies, emerging risks, and evolving standards, and applying this knowledge to ongoing deliveries. Technologies: Support Security More: We are excited to offer an opportunity for a Senior Cyber Security Engineer (Assurance) to join our Rail Infrastructure Communication and Information Systems (CIS) team. Our flexible location allows for face-to-face engagement weekly in Chippenham or Ashby de la Zouch, UK. As market leaders in rail and logistics, we aim to integrate various transportation systems to enhance mobility. This role provides the chance to work on the whole delivery lifecycle, ensuring safe and secure rail systems while collaborating with talented professionals in a dynamic environment. last updated 4 week of 2026