Senior OT Cyber Security Engineer

SUMMIT RECRUITMENT AG seeks a Senior OT Cyber Security Engineer in Winterthur to integrate security controls into industrial systems and ensure compliance with standards like IEC 62443.

This position focuses on embedding robust cybersecurity measures into operational technology (OT) and product designs. The engineer collaborates directly with development teams to secure industrial devices, networks, and controllers throughout the product lifecycle.

Responsibilities

• Secure industrial hardware, controllers, and network infrastructure by configuring hardening settings, managing credentials, and enabling secure boot processes.
• Design and maintain network segmentation strategies, firewall policies, secure remote access solutions, and monitoring frameworks within OT environments.
• Perform threat modeling and risk assessments on actual system designs, translating identified vulnerabilities into actionable engineering tasks.
• Integrate security testing into the development workflow, including vulnerability scanning, fuzzing, and penetration testing.
• Support incident response and forensic investigations when security breaches or anomalies occur in operational settings.
• Ensure engineering practices align with IEC 62443, ISO 27001, and regulatory frameworks such as NIS2 and the Cyber Resilience Act (CRA).

Requirements

• A university degree in computer science, electrical engineering, embedded systems, or a closely related technical field (e.g., from ETH, Uni, or FH).
• Proven professional experience in cybersecurity for OT, ICS, or embedded systems.
• Hands-on proficiency with Linux, network configuration, packet analysis using tools like Wireshark or tcpdump, and scripting in Python or Bash.
• Solid understanding of firewalls, IDS/IPS systems, VPNs, and network segmentation within industrial contexts.
• Fluent command of both German and English.

Nice to have

• Prior work experience in industrial automation, transportation, energy, or comparable sectors.
• Familiarity with IEC 62443 and associated industry standards.