Role : Cybersecurity & Data Protection Advisor
Location : Hybrid Foxboro or Andover, MA (23 days onsite)
Term : 6 months (possible extension)
Level : 35 years Cybersecurity (mid-level)
Team : R&D / Product Security / Secure Development Lifecycle
Standards : IEC 62443, SDL v2
Key Scope : Cloud, APIs, PEN test review, Threat modeling, Privacy by Design
Responsibilities
- Lead cybersecurity & privacy efforts for product certification cycles.
- Define / implement IT / OT security requirements for digital products.
- Conduct risk assessments, threat modeling, and analyze PenTest results.
- Execute Secure Development Lifecycle (SDL v2) activities.
- Manage SAST / DAST scanning tools & produce required artifacts.
- Perform pre-penetration test validations and documentation.
- Act as security SME for R&D, product, and architecture teams.
- Support cloud security design, API security, PKI, authentication / encryption.
- Maintain compliance documentation & support incident response planning.
- Collaborate with cross-functional teams (Product, Engineering, Cloud).
Required Skills
3+ years cybersecurity experience (preferably R&D product security).Strong with IEC 62443 (ISA expert certification good to have).Experience with ICS / OT, cloud, APIs, IoT, secure architecture.Knowledge of OWASP , DevSecOps, SAST / DAST (Coverity, Black Duck, SonarQube).Understanding of cryptography, PKI, identity / auth, API security.Excellent communication and ability to advise teams.