Product Security Engineer (Product & Solution Security Expert) MI (f/m)

Your responsibilities

• The technical responsibility for the correct implementation of the Secure Product Development Lifecycle (SPDL) for printers and related software
• Ensure compliance with applicable legislation – in particular the EU Cyber Resilience Act (CRA) and ISA/IEC 62443 standards
• Support development teams with security expertise: secure by design, threat model and risk assessment of security threats, risk assessment of vulnerables and security defects, checking the security-relevant contents of the user documentation, coach reviews of the security design.
• Continuous improvement of the secure development lifecycle
• Collecting and evaluating KPIs in the process
• Contributing to the wider PSSE community at the Phoenix Contact group
• Success Metrics: Reduction in security vulnerabilities identified post-release , Time-to-remediation for critical and high-severity vulnerabilities, Team security competency growth (certifications, training completion, Compliance readiness for EU CRA by enforcement date (December 2027).

Our requirements

• Bachelor’s degree in cyber security or equivalent professional experience
• Fundamental knowledge of all aspects of cyber security including security management, system security and administration, network protocols, programming languages, threat and risk analysis, and security testing
• Extensive skills in at least one of the areas listed above
• Familiarity with ISA/IEC 62443 (industrial automation cybersecurity) standards
• Understanding of EU Cyber Resilience Act requirements and implementation timelines
• Knowledge of relevant frameworks (NIST CSF, ISO 27001, OWASP)
• Excellent written and spoken English (at least CEFR level C1)

Optional

• Bachelor’s and master’s degrees in cyber security
• Industry certifications, in particular Offensive Security Certified Professional (OSCP), Certified Penetration Testing Specialist (CPTS), Certified Secure Software Lifecycle Professional (CSSLP), or Global Industrial Cyber Security Professional (GICSP)
• Working proficiency in German (CEFR level B2)

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of foreign language classes
• sharing the costs of professional training & courses
• life insurance
• remote work opportunities
• flexible working time
• integration events
• preferential loans
• parking space for employees
• extra social benefits
• pre-paid cards
• holiday funds
• redeployment package
• sharing the costs of holidays for kids
• baby layette
• school layette
• christmas gifts
• sharing the commuting costs
• employee referral program
• opportunity to obtain permits and licenses
• charity initiatives
• family picnics
• extra leave
• annual award

PHOENIX CONTACT WIELKOPOLSKA Sp. z o.o.