Product Cybersecurity Engineer​/Specialist

Position: Product Cybersecurity Engineer / Specialist
Location: Harwell

## Product Cybersecurity Engineer / Specialist Apply locations:
UK-Harwell:
UK-Remote Location-Harwelltime type:
Full time posted on:
Posted Todayjob requisition :
4038116##
** Job Description
***
* Location:

Harwell, Oxfordshire (Hybrid)
**** Company:
Agilent Technologies *- Spectroscopy & Vacuum Division
***** Overview
* * We are seeking an experienced
** Product Cybersecurity Engineer
** to lead and support cybersecurity activities across our spectroscopy and vacuum product portfolio. This role is critical to ensuring our products meet evolving global cybersecurity regulations, customer requirements, and industry best practices—particularly in regulated markets such as
** aviation security, customs & borders, pharmaceuticals, and defence**.You will work cross-functionally with
** R&D, Product Security, Agilent IT , Sales, and Marketing teams**, ensuring cybersecurity is embedded throughout the product lifecycle—from design and development through to deployment and ongoing support.

You will report to the R&D Software Manager as part of the team responsible for writing the software/firmware that runs our instruments but it is expected that this will be a cross-functional and cross-product role.

The role will be based out of our Harwell, Oxfordshire office in the UK. There is some expectation to be on-site for hands-on work with our products, but we operate a hybrid model (2-3 days working from home, 2-3 days on-site) as a standard option.
** Key Responsibilities
**** 1. Cybersecurity Compliance & Regulation
*** Interpret and apply
** global cybersecurity and privacy regulations** (e.g. GDPR, EU Cyber Resilience Act). Aligning approach with Legal and the CISO organisation.
* Act as product line lead for
** EU CRA readiness**, including:  + Product cybersecurity documentation  + Policy and procedure development  + Coordination and collaboration with product teams and central security functions
* Own and track
** remediation plans
** to ensure continued product compliance.
* Maintain and review
** cybersecurity requirements
** aligned to target markets (e.g. defence, aviation, customs).
* Ensure products are
** GDPR compliant**.
** 2. Sales & Customer Cybersecurity Support
*** Support
** Sales and Marketing
** with cybersecurity content for tenders and bids:  + Contribute to cybersecurity whitepapers and standard documentation  + Provide technical input for tender compliance submissions
* Participate in
** customer-facing cybersecurity discussions**, where needed.
* Review customer and regulatory documentation and translate requirements into
** product development inputs**.
* Stay aligned with
** industry developments and best practices**.
** 3. Secure Product Development
*** Ensure products meet:  + Internal
** Agilent security policies and procedures**  + External
** regulatory and customer requirements
*** Drive a
** proactive cybersecurity approach
** within product development.
* Conduct or support
** cybersecurity testing and assessments**, identifying vulnerabilities and providing reports.
* Collaborate with R&D to:  + Analyse vulnerabilities  + Identify false positives and controls  + Conduct threat modelling  + Define, implement and track remediation plans
* Provide technical guidance on:  + Encryption and key management  + Patch management  + Identity and user management
* Contribute to infrastructure security (e.g.
** certificate and secret management**).
* Support
** secure product configuration
** tailored to customer needs.
** 4. Dev Sec Ops  & Security Engineering
*** Drive adoption of
** Dev Sec Ops  practices**, including:  + CI/CD security integration  + Automated vulnerability scanning (e.g. Nessus)
* Implement and maintain:  +
** Static Application Security Testing (SAST)**  +
** Dynamic Application Security Testing (DAST)**  +
** Software Composition Analysis (SCA)
*** Lead
** Software Bill of Materials (SBOM)
** creation and management in the spectroscopy and vacuum product lines.
* Perform
** application security and penetration testing
** in collaboration with the internal Product Security Program team.
** 5. Embedded Systems Security
*** Secure
** Windows 10/11 IoT-based embedded systems**, including:  + Group…