.Rail Project Cybersecurity EngineerLocation: Madrid (Hybrid)Time Type: Full timePosted on: 2 Days AgoSobre nosotrosUna carrera en Hitachi Rail te ayudará a tener un legado. Con actividades en todos los rincones del mundo, nuestro trabajo está a la vanguardia de la transformación digital y la tecnología. Desde la fuerza multicultural de nuestra organización global a la sostenibilidad e innovación trabajamos para atraer a las personas, hay algo para que todos/as se enganchen. Y ahí es donde entras tú.What does a Project Security Manager do?The role is responsible for contributing to the growth of the cyber security business in Spain providing specialty engineering services in the area of cyber security in close co-operation with the bids and projects engineering teams.Plans and manages the security related activities within bids, projects and services to ensure that the Solution is adequately secure and this role includes responsibility for:- Provides valid estimates for security engineering activities. Analysing customer needs/requirements and assess solution architectures and technical choices. Ensures solution compliance with customer needs, product policy, make-team-buy strategy and applicable rules and regulations.- Creates and manages the project Security Management Plan; carrying out a SecurityRisk Assessment, reviewing the technical risks and the related mitigation plans.- Creates, maintains contributes to the project Security Log. Including appropriate traceability to the Causes, Consequences, Risk Control Measures, Assumptions, etc.- Maintains the Solution Security Requirements in form of Security Control Baseline.- Defines a valid and acceptable Security Case.- Liaises with external stakeholders for solution security; including PENTEST exercises.- Supports audits and the investigation of incidents and accidents.- Issues Security Statements and appropriate certification prior to interim, partial or final release of Solutions.- Archives the Security Case material at appropriate project milestones.- Ensures effective in-service reporting mechanisms exist and that security issues are identified and resolved.- Tasks Security Engineers to undertake project security activities.- Ensures the relevance of various cybersecurity expertise for all activities.What are we looking for?- Telecom or computer science engineer or similar.- Master degree in cyber security highly valuated.- English fluency is a must.- Good knowledge and expertise in following areas:- Security Architecture (Network, Database, Application, etc.)- Risk assessment- Regulations and standards; ENS, CENELEC TS 50701, IEC 62443 and IEC 63452- Encryption / Cryptographic functions- Vulnerability assessment and penetration testingWhat we offer?- Vacation periods of approximately 35 working days.- Thales Concilia which includes services for your care and the care of those around you.- Work from home up to 3 days a week.- Flexible working hours.- Lunch card
