Loading...
 

Cybersecurity Engineer

Apply now »

Date: 16-Nov-2021

Location: Madrid, MD, Spain

Company: Alstom

 

We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more than 75 000 people dedicated to solving real-world mobility challenges and achieving international projects with sustainable local impact.   

Position: Cybersecurity Engineer

Duration: Permanent

Location: Madrid

 

Overall Purpose of The Role

The Cybersecurity Engineer (CyEng) reporting to the Project Cybersecurity Manager (Delivery Manager) and Regional Cybersecurity Head.

The Cybersecurity Engineer role is to execute cybersecurity activities during project, tender or program execution. 2 roles are defined: • Cybersecurity Risk Analyst (CyRA) • Cybersecurity Designer (CyD).

 

Detailed Responsibilities
 

Cybersecurity Risk Analyst (CyRA) The Cybersecurity Risk Analyst (CyRA) is in charge of the

following activities:

• Perform and then maintain Cybersecurity Risk Analysis

• Develop and document risk mitigation action plans, including recommendations to reduce information security risk

• Perform the interviews for risk analysis of different sub-systems engineers

• Audit the application of the mitigation plan for every stakeholder’s

 

Cybersecurity Designer (CyD) The Cybersecurity Designer (CyD) is in charge of the following

activities:

• Define Cybersecurity Architecture & Design principles including in particular:

 -Proposition of the technical solution for implementation in line with cybersecurity

  design directives. One main outcome is the identification of possible candidate

  cybersecurity architectures

-Define and maintain cybersecurity architecture with the identification of the zone,  

  Security Level Target and Cybersecurity Functions • Support implementation of

  cybersecurity through active contribution in Author-Reader cycles of design documents.

 

Competencies & Experience

 

  • University/ Engineer in degree level
  • Master’s degree in Engineering/Technology or related field
  • More than 5 years of experience
  • Strong interest for Cybersecurity, experience related to Cybersecurity or hacking in general
  • Main standards and regulations, such as: ISO 2700X, 62443, NIST, NIS, French LPM
  • Knowledge of the security market and its key players;
  • Knowledge of some security solutions and areas, such as: BRP / DRP, GRC, IAM, DLP, PKI, SOC,
  • IDS / IPS, SAP security, etc.
  • Technical proficiency in at least 2 of the following field o Methods of risk analysis (ISO 27005, Ebios,etc.) o Architecture concepts and techniques of systems and networks, operating systems and associated programming languages. o Knowledge of the main techniques for evaluating systems security o Knowledge of tools of tools such as Wireshark, Nmap, OpenVAS, Nexpose, Metasploit, nessus, BURP o Encryption issues and tools (e.g. Truecrypt, Openssl) o Low level filtering (Firewall owners, Iptables, OpenVPN) o Intrusion testing techniques.
  •  Desirable: Cybersecurity certification such as: GICSP, CISSP, GSEC, CISM, CISA, CEH

  • High level in English is a must (B2 or C1 level)

  • Strong analytical skills with demonstrated ability for problem solving
  • Creativity and ability to work in a complex environment
  • Proven planning, prioritization and organizational skills
  • Professional & concise communication (written & verbal)
  • Knowledge in Railway Sector or Industry will be a plus.

 

 

An agile, inclusive and responsible culture is the foundation of our company where diverse people are offered excellent opportunities to grow, learn and advance in their careers.  We are committed to encouraging our employees to reach their full potential, while valuing and respecting them as individuals.   

 


Job Segment: ERP, SAP, Information Security, Technology