Ingeteam is a leading international technology group specializing in energy conversion, power electronics, and electrical engineering. The company develops advanced solutions for renewable energy sectors including wind, solar, and hydroelectric power, as well as electric vehicle charging infrastructure, marine traction, and power grids. With a global workforce and operations in over 20 countries, Ingeteam is a key player in the global energy transition and sustainable mobility.

Headquartered in the Basque Country, Ingeteam maintains a massive footprint in Spain with major R&D and manufacturing centers in Zamudio and Sarriguren. For international professionals, the company offers highly technical opportunities in power electronics, software development, and global project management. While Spanish is the primary language for many local operations, their global reach and international project scope make them an attractive employer for engineers and specialists from around the world.

Ingeteam was formed through the merger of several Spanish engineering firms with roots dating back to the mid-20th century, including Team and Indar. It has grown from a local manufacturer of electrical equipment into a global powerhouse in energy conversion technology.

For international professionals

Global leader in renewable energy technology headquartered in the Basque Country, a major industrial hub in Spain.
Offers a wide range of highly technical roles in R&D, power electronics, and control systems engineering.
Operates in 24 countries, providing significant opportunities for international project involvement and career mobility.
Major Spanish hubs are located in Zamudio and Sarriguren, areas known for high quality of life and technological innovation.
Actively involved in the green energy transition, making it an ideal choice for professionals focused on sustainability.

Product Cybersecurity Engineer

Ingeteam

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

Ingeteam, a leading company specializing in electrical engineering and the development of electrical equipment, motors, generators, and frequency converters, is looking to incorporate a Product Cybersecurity Engineer at its facilities in Zamudio.

She/he will join the Ingeteam Research Institute, within the Digital Transformation department, and their mission will be to integrate security into the lifecycle of our products and ensure compliance with applicable norms and regulations. The selected person will work in close collaboration with the R&D teams of the business units, driving security from design to product operation.

Main functions and responsibilities:

-Collaborate with engineering and development teams to integrate cybersecurity requirements into the product development lifecycle, aligned with standards such as IEC 62443-4-1 and industry best practices.

-Perform risk analysis and threat modeling for products and systems.

-Participate in the identification and analysis of cybersecurity risks in products, including threat modeling and the definition of security requirements.

-Analyze and adapt products to applicable regulations and regulatory frameworks, such as the Cyber Resilience Act (CRA).

-Support product security certification and evaluation processes (e.g., IEC 62443-4-2).

-Manage the product vulnerability management process, including identification, evaluation, prioritization, and coordination of remediations.

-Coordinate or participate in security evaluations and tests, such as architecture reviews, code analysis, or penetration tests.

-Collaborate in the definition of security requirements for new products and functionalities, ensuring their correct implementation by the development teams.

-Collaborate in the response to product-related security incidents and the associated technical communication.

-Support technical and business teams in the response to customer cybersecurity requirements.

Minimum requirements:

· University degree in Computer Engineering, Telecommunications Engineering, Cybersecurity, or related fields.

· High level of English.

· +3 years of experience in cybersecurity.

· Knowledge of the IEC 62443-4-1 and/or IEC 62443-4-2 standard and experience in product security evaluation processes.

The following will be valued:

· Master's or postgraduate degree in Cybersecurity or Information Security,

· Knowledge of the Cyber Resilience Act (CRA) and other regulations applicable to digital products.

· Knowledge of networks and communication protocols, especially in industrial environments.

· Experience in product vulnerability management and lifecycle tracking, security advisory management, and coordination with PSIRT.

· Experience in Secure Development Lifecycle (SDL) or secure development.

· Experience in pentesting or product security testing.

· Knowledge of embedded systems, firmware, or device architecture.

· Experience in OT environments or industrial systems, or knowledge in this field.

Offered:

- Joining an innovative organization leading in Power Electronics, contributing to the transition of the energy model, impacting triple sustainability (social, environmental, and economic)

- Flexible schedule and other work-life balance facilities

- Remuneration consistent with the candidate's experience

- Permanent contract

- Integration into a young, dynamic, and technologically cutting-edge team

At Ingeteam, we value diversity and facilitate the inclusion of people with disabilities. Therefore, if you meet the general requirements of the vacancy and have a certificate with a disability degree equal to or greater than 33%, Ingeteam will positively value your candidacy.

#LI-TP1

View original advert (Spanish)

Ingeteam, empresa líder especializada en ingeniería eléctrica y en el desarrollo de equipos eléctricos, motores, generadores y convertidores de frecuencia, busca incorporar un/a Ingeniero/a de Ciberseguridad de Producto en sus instalaciones de Zamudio.

Se integrará en Ingeteam Research Institute, dentro del departamento de Transformación Digital y su misión será integrar la seguridad en el ciclo de vida de nuestros productos y a garantizar el cumplimiento de las normativas y regulaciones aplicables. La persona seleccionada trabajará en estrecha colaboración con los equipos de I+D de las unidades de negocio, impulsando la seguridad desde el diseño hasta la operación del producto.

Principales funciones y responsabilidades:

-Colaborar con los equipos de ingeniería y desarrollo para incorporar Integrar requisitos de ciberseguridad en el ciclo de vida de desarrollo de producto, alineado con estándares como IEC 62443-4-1 y buenas prácticas del sector.

-Realizar análisis de riesgos y modelado de amenazas en productos y sistemas.

-Participar en la identificación y análisis de riesgos de ciberseguridad en productos, incluyendo modelado de amenazas y definición de requisitos de seguridad.

-Analizar y adaptar los productos a regulaciones y marcos normativos aplicables, como el Cyber Resilience Act (CRA).

-Dar soporte a los procesos de certificación y evaluación de seguridad de producto (por ejemplo IEC 62443-4-2).

-Gestionar el proceso de gestión de vulnerabilidades de producto, incluyendo identificación, evaluación, priorización y coordinación de remediaciones.

-Coordinar o participar en evaluaciones y pruebas de seguridad, como revisiones de arquitectura, análisis de código o pruebas de penetración.

-Colaborar en la definición de requisitos de seguridad para nuevos productos y funcionalidades, asegurando su correcta implementación por los equipos de desarrollo.

-Colaborar en la respuesta a incidentes de seguridad relacionados con producto y en la comunicación técnica asociada.

-Apoyar a los equipos técnicos y de negocio en la respuesta a requisitos de ciberseguridad de clientes.

Requisitos mínimos:

· Grado universitario en Ingeniería Informática, Ingeniería de Telecomunicación, Ciberseguridad o campos relacionados.

· Nivel alto de inglés.

· +3 años de experiencia en ciberseguridad.

· Conocimiento de la norma IEC 62443-4-1 y/o IEC 62443-4-2 y experiencia en procesos de evaluación de seguridad de producto.

Se valorarán:

· Máster o postgrado en Ciberseguridad o Seguridad de la Información,

· Conocimiento del Cyber Resilience Act (CRA) y otras regulaciones aplicables a productos digitales.

· Conocimientos de redes y protocolos de comunicación, especialmente en entornos industriales.

· Experiencia en gestión de vulnerabilidades de producto y seguimiento de su ciclo de vida, gestión de avisos de seguridad y coordinación con PSIRT.

· Experiencia en Secure Development Lifecycle (SDL) o desarrollo seguro.

· Experiencia en pentesting o security testing de producto.

· Conocimientos de sistemas embebidos, firmware o arquitectura de dispositivos.

· Experiencia en entornos OT o sistemas industriales o conocimientos en ese ámbito.

Se ofrece:

- Incorporación a organización innovadora líder en Electrónica de Potencia, siendo parte de la contribución a la transición del modelo energético, impactando en la triple sostenibilidad (social, medioambiental y económica)

- Horario flexible y otras facilidades de conciliación laboral - personal

- Retribución coherente con la experiencia del/la candidato/a

- Contratación de carácter indefinido

- Integración en equipo joven, dinámico y tecnológicamente puntero

En Ingeteam valoramos la diversidad y facilitamos la inserción de personas con discapacidad. Por ello, si reúnes los requisitos generales de la vacante y dispones de certificado con grado de discapacidad igual o superior al 33%, Ingeteam valorará positivamente tu candidatura.

#LI-TP1