Proekspert

Manufacturing

ProductSecuritySpecialist

€40–55k ~AI est. Tallinn, Harju County, Estonia FULL TIME
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for mid candidates.

The Brief

“Product Security Specialist at Proekspert. Skills: Product Security, IEC 62443, Cyber Resilience Act. Advise clients on Device security. Consult clients on IEC 62443”

Industry & Context.

Manufacturing

What They're Looking For.

Must Have

Experience with cybersecurity standard, Solid understanding of SDLC, Understand how vulnerabilities exploited, Excellent spoken English, Excellent written English, Bachelor's degree in Computer Science

Nice to Have

Understanding vulnerability management, Understanding EU CRA regulation, Understanding SBOM management, Experience with vulnerability scanning, Previous experience with C/C++, Understanding of Radio Equipment Directive, Estonian language

What You'll Do.

Advise clients on Device security

Consult clients on IEC 62443

Consult clients on EU Cyber Resilience Act

Perform component risk assessment

Perform system risk assessment

Perform threat modelling

Review secure architecture

Develop embedded software for compliance

Translate regulatory language

Translate engineering language

Brief executive team on risks

How You'll Work.

Team & Collaboration

Cross-Functional Collaboration; Support development teams

Communication Scope

Explain compliance to stakeholders

Full Job Description

Proekspert is a fast-growing IT company providing tailored, high-impact solutions for the manufacturing and smart device industry across Europe. We are looking for a Software Development or Systems Engineer with practical experience in the IEC 62443 standard. We expect the person to have experience in IT/OT systems. A suitable candidate should have the ability to understand the client's business, products, and related cybersecurity needs and consult clients and support development teams. Your work will be focused on the following: * Advising and consulting clients in the field of Device security and compliance with IEC 62443 and other related standards and the EU Cyber Resilience Act (CRA). * Component/system cybersecurity risk assessment. * Threat modelling & secure architecture review. * Embedded Software Development to meet IEC62443-4-2 compliance. * Cross-Functional Collaboration: translate complex regulatory and engineering language into actionable tasks/goals and brief the executive team on compliance risks. ## Qualifications You'll Excel in This Role If You Have: * Experience working with a cybersecurity standard or framework like: (NIS2, NIST Cybersecurity Framework, IEC 62443 series, ISO/IEC 27001 & 27002). * Technical Literacy: a solid understanding of the Software Development Life Cycle (SDLC) and how hardware/software vulnerabilities are exploited. * Excellent spoken and written English (with the ability to explain "the why" behind compliance to technical and business stakeholders who have limited know-how of cybersecurity. * Bachelor's degree in Computer Science or related field. ## Additional Information Nice to have skills: * Understanding vulnerability management, EU CRA regulation, SBOM management. Vulnerability scanning solutions. * Previous experience with C/C++ * Radio Equipment Directive (RED). * Understanding of the Software Development Life Cycle (SDLC) and how hardware/software vulnerabilities are exploited. * Estonian language.

Free ATS check

Applying for this Product Security Specialist role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on SmartRecruiters

  • SmartRecruiters often includes a video screening step — check camera and mic permissions.
  • Link your GitHub or portfolio directly in the profile section for technical roles.
  • Applications may be reviewed by AI scoring before reaching a recruiter — use keywords from the job description.

ANONYMOUS · UNFILTERED

What do employees actually say about Proekspert?

Real rants from real employees. Read before you apply.

Read Company Rants →