R&D Engineer(Cyber Security)

该职位来源于猎聘 The objective of the position is to design and document cyber security mechanisms for products, assem-blies, individual parts, components and functions within the Vaillant Group processes in a function-, pro-duction-, cost- and risk-oriented manner. The employee is independently responsible for and supervises cyber security tasks in the Software and Hardware development process. Job Descriptions:

• The employee ensures that the specified quality and security goals, costs and requirements specifications are achieved by methodically and independently developing concept alternatives and systematically selecting/evaluating the variants, taking into account cyber security guidelines and best practices.
• The Market Available conducts code and architecture reviews with regard to compliance with valid security guidelines and security best practices.
• The Market Available ensures that the cyber security relevant quality objectives, costs and specifications of the supervised development teams are achieved through the targeted selection/definition of quality assurance processes and methods and their compliance.
• The employee creates and is responsible for cyber security relevant documentation for products, assemblies, individual parts and their functional requirements in compliance with standards, regulations and norms.
• Projects are processed within the framework of the valid Vaillant innovation process. The preventive QA methods and processes are applied and constantly improved.
• The employee evaluates the applied development processes for their suitability to develop safe components and develops suggestions for improvement.
• Tests and simulations to determine the system functions, in particular the practicality and functionality of the security mechanisms of all relevant products, assemblies, individual parts are responsible, planned, defined, carried out and evaluated.
• In addition, independently conducted penetration tests are controlled, test results are evaluated and communicated to relevant parties and possible solutions are developed with the relevant parties.
• Facilitate cyber security risk analysis based on existing safety risk documentation and treatment. Qualifications:
• Bachelor degree or above in IT security, computer science with a focus on IT security or comparable qualification;
• Three years of professional experience in the field of IT or cyber security, professional experience in embedded software development, knowledge of agile development approaches (Scrum, DevSecOps) and cloud-based solutions;.
• Practical expe-rience with the CCRC or MLPS standard, IEC 62443-4-1&4-2.
• Team spirit and very good communication, fluent in English.