Embedded Security Expert in Hebburn

Are you a cybersecurity visionary passionate about safeguarding critical infrastructure? At Siemens Electrification & Automation (EA), we're not just transforming energy systems; we're engineering solutions that shape society, connecting the real and digital worlds with unwavering security. Our dedicated team in Hebburn, near Newcastle upon Tyne, UK, is a vital part of a global R&D group, collaborating with colleagues in Germany, China, India, and Vienna. We specialise in designing robust and innovative Power System Protection devices for the electrical supply industry, and security is at the very core of what we do.

We're seeking an experienced Embedded Security Expert to join our multidisciplinary engineering team. In this pivotal role, you'll provide technical leadership in cybersecurity for our embedded and industrial products. You'll be instrumental in ensuring our systems are secure by design, resilient against evolving cyber threats, and compliant with stringent industry standards throughout the entire product lifecycle. Your expertise will directly contribute to the delivery and testing of high-quality, robust, and maintainable security solutions across both embedded and PC applications.

You will make a difference by:

• Driving and supporting compliance with standards such as IEC 62443, IEC 62351, ISO 27001, NIS2, CRA, and customer security requirements.
• Defining secure architectures for embedded devices and firmware.
• Performing threat modeling, security risk assessments, and design reviews.
• Hands-on implementation of security features within embedded software environments.
• Leading security assurance activities, including vulnerability assessments and penetration testing.
• Managing vulnerability remediation, security incidents, and product security updates.
• Supporting and consulting project leaders in implementing required product and solution security (both software and hardware).
• Championing secure development practices and ensuring high code quality through the usage of code quality tools and defect fixing.

A degree in Computer Science, Cyber Security, Electronic Engineering, or an equivalent technical discipline is required. Strong knowledge of ARM architectures, Real-Time Operating Systems (RTOSs), bootloaders, and embedded communication protocols is essential. Hands-on experience in software development using C/C++ is also necessary, along with experience in product development within a lean product development process environment.

Expertise in any of the following security topics is advantageous:

• Secure Boot & Secure Firmware Updates
• Cryptography (e.g., AES, RSA, ECC, TLS)
• PKI and certificate management
• Secure key storage and provisioning
• Threat modeling and vulnerability assessment
• Secure coding and security testing

What can we offer?

• Performance-Based Bonus: Enjoy an annual bonus linked to the company's performance.
• Flexible Working Hours: Achieve a healthy work-life balance with our flexible working arrangements.
• Pension Plan: Secure your future with our generous pension scheme, with employer contributions up to 10%.
• Time Off: Recharge and rejuvenate with 26 days of annual leave (plus bank holidays), and the option to buy or sell an additional 5 days!

We are fully committed to providing equal opportunities and building an inclusive workplace where a broad range of backgrounds and perspectives thrive. We embrace the many ways people think, learn, and experience the world—because we know that diverse minds drive innovation. So that we can support you to be your best during the application and interview process, please let us know if you have any specific requirements.