Cybersecurity Assessment & Testing Engineer

About the role

The Cybersecurity Assessment & Testing Engineer will design, deploy, test, and optimise cybersecurity solutions across both IT and OT environments. This position bridges security engineering, threat simulation and operational enablement to ensure robust cyber‑resilience for the organisation.

Key responsibilities

• Design, deploy and optimise security platforms such as SIEM, SOAR, vulnerability management and endpoint protection.
• Develop automation workflows and API integrations to improve operational efficiency.
• Conduct penetration testing and red‑team engagements across network, application, cloud and industrial control systems.
• Perform vulnerability and configuration assessments for IT and OT infrastructures, delivering prioritised mitigation plans.
• Assess and enhance security visibility in SCADA, PLC and IIoT environments, supporting segmentation and hardening per IEC 62443.
• Support OS hardening, patch management and endpoint control across hybrid and on‑premises architectures.
• Produce clear reports and present findings to technical and executive audiences.
• Manage security awareness and training platforms to reinforce a strong security culture.
• Stay up‑to‑date with emerging threats and pilot new tools to improve automation and testing capabilities.

Required profile

• Bachelor’s degree in Computer Engineering, Information Systems or a related field.
• Strong analytical mindset with experience in both IT and industrial security domains.
• Ability to communicate complex technical findings to non‑technical stakeholders.

Required skills

• SIEM and SOAR platforms
• Vulnerability management tools
• Endpoint protection solutions
• API integration and scripting (e.g., Python, PowerShell)
• Penetration testing and red‑team techniques
• Phishing, malware delivery and privilege‑escalation simulations
• Vulnerability and configuration assessment methodologies
• OT security knowledge (SCADA, PLC, IIoT, IEC 62443)
• OS hardening, patch management and endpoint control
• Hybrid cloud and on‑premises architecture integration