Overview
On Site
Depends on Experience
Full Time
No Travel Required
Skills
Cybersecurity
Project Management
estimate costs
ISO 2700X
62443
NIST
APTA
Railway
Metro
Aerospace
Job Details
Job Title: Cybersecurity Engineer
Location: Rochester, NY & Pittsburg, PA (On-site role)
Duration: 12+ Months
Candidates from Rail/Metro Industry/aeronautics preferred.
Key accountabilities:
- Analyze Program security needs (including laws and regulations), determine security objectives and main security risks strategy
- Plan security activities within development life cycle, estimate costs and duration, their impacts related to program execution, Identify training needs
- Is responsible for Cost / Quality / Delay of Program Cybersecurity deliverables, as needed per Project / program context :
- Cybersecurity context, and Cybersecurity Risk Analysis
- Cybersecurity Architecture definition and requirement allocation
- Cascading of requirement to suppliers, Manage Third Parties Risks,
- Application of Cybersecurity Assurance Level
- Definition of Cybersecurity Operating Procedures
- Evaluation of the Project/Program achieved Cybersecurity level
- Provide support during technical design meetings for Cybersecurity activities
- Obtain agreement from Program/Customer about on the set of security measures to be implemented
- Manage vulnerabilities and Cybersecurity issues and actions plan,
- Manage Program Cybersecurity related communication,
- Report on Program Cybersecurity status
- In case of external Cybersecurity audit, manage the relationship with auditors Establish lessons learned
- Promoting the Alstom Code of Ethics and adhering to the highest standards of ethical conduct
Experience: Mandatory:
- Experience with direct responsibility for hands on architecture, design, development
- Experience related to Cybersecurity in general, deployment experience of security technologies
- Experience with Project Management
Desirable:
- Experience in embedded or OT/ Industrial systems (railway / aeronautics...)
- Experience working with engineering teams
Competencies & Skills
- Engineering Background
- Knowledge of main Cybersecurity standards and regulations, such as: ISO 2700X, 62443, NIST, APTA
- Knowledge of some Cybersecurity solutions and areas
- Methods of Cybersecurity risk analysis Architecture concepts and techniques of systems and networks, operating systems and associated programming languages.
- Knowledge of the main techniques for evaluating systems security