Cyber Security Engineer - CRA Readiness & Secure--Design

Bright Purple are looking for an experienced Cyber Engineering Contractor to join a global security technology manufacturer as it prepares for the EU Cyber Resilience Act (CRA). This is a hands-on, delivery-focused role working across multiple product lines, partnering with engineering, software development, product management, regulatory, quality and service teams to assess products, close compliance gaps and build security into products from the ground up.

What we’re looking for:

• Experience assessing products against cybersecurity standards and regulations
• Knowledge of the EU Cyber Resilience Act, NIST 800-53, NIST 800-218, IEC 62443 and NIS2
• Strong understanding of secure-by-design principles and the Secure Software Development Lifecycle
• Understanding of software development and vulnerability management processes
• Experience producing clear technical security documentation
• Confidence working independently across multiple engineering teams
• Strong stakeholder management and communication skills
• OT/ICS, PLC and HMI experience would be a real plus
• SAST, SCA and SBOM tooling experience is highly desirable
• Background in manufacturing, defence, critical infrastructure or other regulated product environments is a bonus

You’ll support CRA readiness assessments, define security requirements and engineering gates, help select and implement SBOM tooling, review third-party components and supplier security, and support customer security questionnaires and regulatory audits, all while helping to build a sustainable Product Security programme.

The role is UK remote, with occasional travel to client sites in England.

If you are keen APPLY NOW.

Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry.