Product Cybersecurity Engineer / Specialist

Spectroscopy & Vacuum Division Overview We are seeking an experienced Product Cybersecurity Engineer to lead and support cybersecurity activities across our spectroscopy and vacuum product portfolio. This role is critical to ensuring our products meet evolving global cybersecurity regulations, customer requirements, and industry best practices—particularly in regulated markets such as aviation security, customs & borders, pharmaceuticals, and defence. Location: Harwell, Oxfordshire (Hybrid) Company: Agilent Technologies - Spectroscopy & Vacuum Division Key Responsibilities * Cybersecurity Compliance & Regulation * Interpret and apply global cybersecurity and privacy regulations (e.g. GDPR, EU Cyber Resilience Act). Aligning approach with Legal and the CISO organisation. * Act as product line lead for EU CRA readiness, including: o Product cybersecurity documentation o Policy and procedure development o Coordination and collaboration with product teams and central security functions * Own and track remediation plans to ensure continued product compliance. * Maintain and review cybersecurity requirements aligned to target markets (e.g. defence, aviation, customs). * Ensure products are GDPR compliant. * Sales & Customer Cybersecurity Support * Support Sales and Marketing with cybersecurity content for tenders and bids: o Contribute to cybersecurity whitepapers and standard documentation o Provide technical input for tender compliance submissions * Participate in customer-facing cybersecurity discussions, where needed. * Review customer and regulatory documentation and translate requirements into product development inputs. * Stay aligned with industry developments and best practices. * Secure Product Development * Ensure products meet: o Internal Agilent security policies and procedures o External regulatory and customer requirements * Drive a proactive cybersecurity approach within product development. * Conduct or support cybersecurity testing and assessments, identifying vulnerabilities and providing reports. * Collaborate with R&D to: o Analyse vulnerabilities o Identify false positives and controls o Conduct threat modelling o Define, implement and track remediation plans * Provide technical guidance on: o Encryption and key management o Patch management o Identity and user management * Contribute to infrastructure security (e.g. certificate and secret management). * Support secure product configuration tailored to customer needs. * DevSecOps & Security Engineering * Drive adoption of DevSecOps practices, including: o CI/CD security integration o Automated vulnerability scanning (e.g. Nessus) * Implement and maintain: o Static Application Security Testing (SAST) o Dynamic Application Security Testing (DAST) o Software Composition Analysis (SCA) * Lead Software Bill of Materials (SBOM) creation and management in the spectroscopy and vacuum product lines. * Perform application security and penetration testing in collaboration with the internal Product Security Program team. * Embedded Systems Security * Secure Windows 10/11 IoT-based embedded systems, including: o Group policy and registry hardening o Attack surface reduction (services, ports, etc.) o Patch and update management o Endpoint protection and antivirus o Mobile Device Management (e.g. Intune) * Implement Microsoft security features such as: o BitLocker, AppLocker, Unified Write Filter (UWF) * Support development and maintenance of embedded OS images. * (Desirable) Knowledge of Embedded Linux security. * Continuous Improvement & Future-Proofing * Monitor emerging threats, vulnerabilities, and regulatory changes. * Ensure products remain secure throughout their lifecycle. * Promote continuous improvement in cybersecurity practices. * Operational Security Activities * Manage OS patching and release cycles for product platforms. * Maintain secure embedded OS builds (e.g. FFU images). * Ensure regular: o Vulnerability scanning (e.g. Nessus) o Security testing and validation * Support CI/CD environment hardening and security patching. Qualifications Essential * Bachelor’s or master’s degree or equivalent * Proven experience in product cybersecurity or application security – typically 4+ years relevant experience. * Strong understanding of: o Secure software development lifecycle (SSDLC) o Vulnerability management and remediation o Regulatory compliance (GDPR, EU CRA, emerging EU and global regulations) * Hands‑on experience with: o Security testing (SAST, DAST, SCA) o Penetration testing or vulnerability analysis o Threat modelling * Knowledge of Windows OS security (preferably embedded/IoT variants). * Experience working with cross‑functional engineering teams. Desirable * Relevant cybersecurity certifications (e.g. CISSP, CompTIA PenTest, ISC2 CSSLP would be beneficial) * Familiarity with DevSecOps tools and CI/CD pipelines * Experience with: o Nessus or similar scanning tools o Software Bill of Materials (SBOM) * Embedded Linux security knowledge. * Exposure to regulated industries (defence, aviation, pharma, border security). * Experience leveraging modern AI‑assisted tools (e.g. Copilot, LLMs) to enhance secure development, documentation, and cybersecurity analysis while applying appropriate engineering judgement and data security controls. Personal Attributes * Strong analytical and problem‑solving skills * Ability to translate regulations into actionable engineering requirements * Excellent communication skills, including customer‑facing interactions * Proactive, self‑driven, and detail‑oriented * Comfortable working across multiple stakeholders and geographies What We Offer * Exciting projects in a multifaceted collaborative team grounded on an Agile Culture and Approach * Career development opportunities in an international company * Competitive compensation and benefits package * Work‑Life‑Balance programs * Permanent contract in a fast‑growing global company * Company pension scheme * Private health care Additional Details * Full time weekly schedule. * Pay ranges are determined by role, level, and location. Individual pay is determined by work location and additional factors, including job‑related skills, experience, and relevant education or training. * Travel Required: Occasional * Shift: Day * Duration: No End Date * Job Function: R&D Agilent Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws. #J-18808-Ljbffr