Program Cybersecurity engineer

The Railway industry today is characterized by both a strong and sustained growth across the world. The trends that drive this are well known: environmental challenges, population growth, urbanization and increasing demands for mobility. With 16,5B€ of Sales and over 80,000 employees based in nearly 70 countries, Alstom develop & market the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation

INTRODUCTION

Alstom develops & markets the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation.

One of the last challenges faced by the railway sector is to take into account the cybersecurity within their solutions: Railway systems, as with most Industrial Automation Control Systems (IACS), have been considered immune to cyber security threats and attacks for years. Nevertheless, the increase of interconnected and digitalized assets in the railway sector and the parallel increase of cyber-crime targeting IACS have driven the need for a coordinated approach to cybersecurity implementation.

What we offer:

• Meaningful work to secure greener and smarter public transport.
• Working daily in an international environment for a global leader in rail mobility.
• Opportunity to participate closely in the development of cybersecurity in the railway sector.

Program Cybersecurity engineer

Overall Purpose Of The Role

The program cybersecurity engineer will manage cybersecurity for mainline program under the responsibility of an experimented Program Cyber Security Manager.

The primary responsibilities of the Program Cybersecurity engineer are:

• For program cybersecurity management:
• To perform security risk assessment of mainline railway sub-system;
• Based on risk assessment, identify the essential cybersecurity requirement needed to comply with the European Cybersecurity Resilience Act.
• Taking into account the railway sector constraints, to specify and validate the suitable architecture, solutions and counter measures for each of the not acceptable risks;
• To define the Cybersecurity processes, rules and guidelines of the Program and ensure these ones are followed;
• To ensure implementation of Cybersecurity Resilient Act at program level.
• For technical mentoring:
• To define cybersecurity solution with the program manager;
• To mentor people how to implement cybersecurity solutions;
• To follow cybersecurity test implementation.
  

• Perform solution cybersecurity security assessment, including Zones and Conduits architectures
• Identify the not acceptable risks for each sub-system and the applicable essential cybersecurity functions of the Cybersecurity Resilience Act
• Specify cybersecurity functions to comply with the European Cybersecurity Resilience Act
• Liaise with the platform and program team to define the most suitable solution reducing the risk to an acceptable value
• Specify the platform cybersecurity requirements and validate their implementation
• Participate in the implementation of cybersecurity within Alstom processes
• Verify that all parts of the program organisation, including subcontractors, perform their work according to the applicable security requirements, security rules, security guidelines, security information
• Support mainline platform cybersecurity manager in joint programs tackling the issue of the cybersecurity in the railway with a specific focus on PKI implementation and cybersecurity tests
• Mentor the cybersecurity test platform program, provide the main guideline for the research program and help to tackle technical implementation issues.

To be considered for this role, candidate need to demonstrate the following skills experience and attributes:

• Master’s degree in Engineering/Technology or related field
• Minimum 2 years of experience in Railway signaling systems or the industrial cybersecurity with strong architecture and functional knowledge
• Knowledge of risk assessment processes
• Fluent with Linux and window OS (services, configuration, …)
• Fluent in English (spoken and written)
• Strong interest for cybersecurity
• Leadership skills, capability to motivate teams
• Ability to drive change through innovation & process improvement
• Strong analytical skills with demonstrated problem solving ability
• Proven planning, prioritization and organizational skills
• Professional & concise communication (written & verbal)