Product Cybersecurity Specialist

Job Title: Product Cybersecurity Specialist

Job : 90557

Location: Port Coquitlam, British Columbia

With their headquarters in Europe, our client develops and tests equipment that will shape the mining industry for years to come. There are only a handful of companies pushing the limits of BEV mining technology, and their Advanced Engineering team in the Vancouver area are on the forefront of this technology.

They currently have an opening for aProduct Cybersecurity Specialist to join their growing team. The Product Cybersecurity Specialist serves as the cybersecurity focal point within the project team developing battery-electric mining equipment and supporting systems. The role translates cybersecurity risks and specialist guidance into practical requirements, coordinates security activities with engineering, and tracks issues through implementation and verification. Working with an external Cyber Resilience Act (CRA) consultant and product compliance colleagues, the specialist helps the team develop and maintain secure products that support safe, productive, lower-emission mining.

• Coordinate cybersecurity activities within the project, agreeing deliverables, contributors, and milestones with the project lead and tracking progress through release.
• Translate guidance from the external CRA consultant and product compliance team into product requirements, engineering actions, and evidence needs, seeking clarification where applicability or interpretation is unresolved.
• Work with systems, firmware, software, and hardware contributors to identify threats, assess product cybersecurity risks, and document proposed mitigations.
• Consider device interfaces, communications, remote access, software dependencies, and intended installation and service environments.
• Participate in architecture and design reviews to help teams select practical security measures and evaluate their effects on equipment operation, safety, and serviceability.
• Maintain traceability between cybersecurity risks, requirements, implementation actions, and verification results within the project's engineering processes.
• Coordinate security verification with developers, verification and validation colleagues, and specialist test providers; review findings and track corrective actions through retesting.
• Coordinate collection and review of supplier cybersecurity information and software component inventories, following up on gaps that affect the project.
• Assess the cybersecurity implications of design changes, newly identified vulnerabilities, and relevant field findings with the responsible engineering and support teams.
• Support remediation planning, secure update arrangements, and escalation through the organization's vulnerability and incident processes.
• Assemble and maintain project cybersecurity records and evidence for review by product compliance and the CRA consultant, identifying missing information before project decision points.
• Communicate cybersecurity status, unresolved risks, and required decisions to the project lead and relevant specialists, and help team members apply agreed security practices in their daily work.

Practical experience assessing cybersecurity risks, defining controls, and working with technical teams to verify that identified issues have been addressed.

• Understanding of embedded devices, industrial automation, connected equipment, or comparable engineered products, including how hardware, software, communications, and external interfaces interact.
• Ability to translate security findings and specialist advice into clear engineering requirements, acceptance criteria, and prioritized actions.
• Working knowledge of secure development and vulnerability management, including access control, secure communications, software updates, and third-party software dependencies.
• Ability to examine system diagrams, interface descriptions, technical documentation, and test results and discuss security implications with developers and engineers.
• Ability to evaluate security measures in the context of equipment safety, availability, performance, maintainability, and field-service constraints.
• Clear technical writing, collaborative problem-solving, and disciplined follow-through across multiple contributors.
• Relevant education in cybersecurity, computer science, electronics, software, or a related discipline, or equivalent practical experience.

• Experience supporting cybersecurity during the development…