Cybersecurity Engineer

About the Company

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, 80,000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

About the Role

Take on a new challenge and apply your engineering expertise in a new cutting-edge field. You'll work alongside passionate, motivated, and dedicated teammates. You'll be responsible for Alstom's solution security analysis and the definition of its security requirements and architecture. Day-to-day, you'll work closely with teams across the business, conducting cybersecurity risk assessments, evaluating the cybersecurity of the developed solutions, and much more.

Key Responsibilities

• Designing and documenting reliable security architectures resilient against cyber threats (CADRA)
• Providing technical guidance and supervision for the project/program team
• Supporting the engineering team in addressing design and technical challenges related to cybersecurity implementation
• Responding to and supporting any security-related incidents and providing post-event analysis
• Ensuring cyber trend monitoring (new threats, new technologies, etc.) related to the delivered solutions
• Collaborating with cross-functional teams to enhance cybersecurity measures
• Implementing cybersecurity requirements and contributing to designing and documenting reliable security architectures

Qualifications

• Degree in Computer Engineering, Software Engineering, Electrical Engineering, or a related field
• Cybersecurity certification such as ISA/IEC 62443
• Extensive experience in IT/OT security and risk management with a focus on security, performance, and reliability
• Technical proficiency in architecture concepts and techniques of systems and networks, operating systems, and associated programming languages
• Experience in embedded or industrial systems (e.g., railway, aeronautics)
• Experience in System Engineering
• Understanding of main cybersecurity standards and regulations, such as ISA/IEC 62443, TS 50701, ISO 2700X, NIST, and NIS
• Understanding of OT system architecture
• Knowledge of cybersecurity risk assessment methodology
• Knowledge of defense-in-depth techniques, including network security architecture development and definition, perimeter security controls such as firewalls, IDS/IPS, network access controls, and network segmentation, various aspects of network security such as routers, switches, and VLAN security, and security concepts related to DNS, including routing, authentication, VPN, and proxy services
• Ability to address both high-level (system) and low-level (IT, security technologies, and software design) concerns and to design a cyber architecture (zoning, services, etc.)
• Knowledge of recognized techniques for evaluating systems security and intrusion testing techniques
• Understanding of third-party auditing and risk assessment
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures
• Dynamic and autonomous, with creativity and the ability to work in a complex environment
• Strong analytical skills, with excellent written and verbal communication abilities

Benefits

• Stability, challenges, and a long-term career free from boring daily routines
• Collaborate with transverse teams and helpful colleagues
• Contribute to innovative projects
• Hybrid working environment
• Career development across functions and countries
• Investment in your development, through award-winning learning
• Fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension)