- Company Name
- DSM-H Consulting
- Job Title
- Cyber Security Engineer - 770
- Job Description
-
**Job Title:** Cyber Security Engineer
**Role Summary:**
Provide technical leadership and cyber‑security expertise to align business strategy with secure software development practices. Drive risk identification, vulnerability management, and secure architecture reviews, ensuring compliance with industry standards and client directives.
**Expectations:**
- Own and implement cyber‑risk strategies that support operational sustainability.
- Deliver measurable cyber metrics and executive‑level decision support.
- Engage multidisciplinary teams under changing priorities while maintaining high‑quality outputs.
**Key Responsibilities:**
- Collaborate with business and client security managers to translate business strategies into secure solutions.
- Define, prioritize, and execute secure SDLC and DevSecOps initiatives.
- Architect and document secure solutions, performing security reviews and architecture assessments.
- Lead vulnerability remediation and develop sustainable vulnerability management programs.
- Identify, track, and report key cyber metrics to stakeholders.
- Maintain current knowledge of security standards, threat modeling, penetration testing, data classification, and secure application design.
- Participate in working groups, providing insights into leading security practices.
**Required Skills:**
*Technical:*
- Expertise in EU‑CRA, ISO 27001, NIST CSF, NIST 800‑82, ISA 62443, OWASP.
- Application architecture, DevOps tooling, cloud service deployment, CI/CD security automation.
- Threat modeling, risk analysis, vulnerability assessment, remediation.
- Identity & Access Management, defense‑in‑depth, API & web services security.
- Embedded systems security, networking (on‑prem & cloud).
- Power BI for reporting.
*Soft:*
- Advanced communication skills for translating technical concepts to non‑security audiences.
- Strong project and change management, multitasking, and coordination across teams.
- Analytical thinking, root‑cause analysis, decision‑making, and critical thinking.
- Consulting mindset with ability to provide strategic guidance.
- Measurement, tactical, strategic planning, and consulting proficiency.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, or related field with ≥10 years experience, **or**
- Master’s degree in the same domain with ≥8 years experience.
- Professional security certifications (CISSP, CCSP, CSSLP, GISCP, GPEN, GWEB, etc.) preferred.