This job offer is not available in your country.

Project Cybersecurity Engineer

AlstomBangalore, KA, IN

30+ days ago

Job description

Req ID : 446808

We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more than 75 000 people dedicated to solving real-world mobility challenges and achieving international projects with sustainable local impact.

Job Title & Purpose

Job Title

EN-XY-01 : Cybersecurity Engineer (CyEng)

Purpose of the Job

Perform Cybersecurity activities during contract execution

Position in the Organisation

Organisation Reporting

Hierarchical manager : Project Cybersecurity Manager (PCyM)

Network & Links

Project or Program Manager and team

Project / Program Cybersecurity Manager

Platform Cybersecurity Managers

Region Cybersecurity Managers

Cybersecurity Management Office

Missions

Performance Measurement / KPI’s

Provide requested deliverable in time with adequate quality
Relevancy of proposed technical solution
Contribution to peer reviews

Responsibilities

Contribute to Project Cyber security activities such as :

Cybersecurity Risks Assessment

Cybersecurity Design (Security Architecture principles, additional security controls)

Cybersecurity Evaluation

Cybersecurity 3rd party management

Cybersecurity Vulnerability Management and incident resolution

Optionally, or if expert :

Participates to norms & standards committee

Ensure cyber trend watch (new threats, new techno, ...)

Contribute to Cybersecurity process and standard definition

Support and deploy cybersecurity knowledge and processes (coaching, awareness & trainings)

Peer review of cyber deliverables from other Projects / Programs

Job Specifications

Knowledge & Experience :

Educational Requirements : Engineering degree

Technical Knowledge / Experience

Five+ years of experience related to Cybersecurity or hacking in general

Main standards and regulations, such as : ISO 2700X, 62443, NIST, NIS, French LPM

Knowledge of the security market and its key players;

Knowledge of some security solutions and areas, such as : BRP / DRP, GRC, , PKI, SOC, IDS / IPS, etc.

Technical proficiency in at least 2 of the following field

Methods of risk analysis (ISO 27005, Ebios, etc.)

Architecture concepts and techniques of systems and networks, operating systems and associated programming languages.

Knowledge of the main techniques for evaluating systems security

Knowledge of tools of tools such as Wireshark, Nmap, OpenVAS, Nexpose, Metasploit, nessus, BURP

Encryption issues and tools (e.g. Truecrypt, Openssl)

Low level filtering (Firewall owners, Iptables, OpenVPN)

Intrusion testing techniques.

Knowledge of Experience in embedded or industrial systems (railway / aeronautics ...) is a plus

Team size : 0

Innovation : Research, Patents etc

An agile, inclusive and responsible culture is the foundation of our company where diverse people are offered excellent opportunities to grow, learn and advance in their careers. We are committed to encouraging our employees to reach their full potential, while valuing and respecting them as individuals.

Job Type : Experienced