Project Cybersecurity Engineer

Job summary

You will analyze program security needs, conduct risk assessments, and implement robust cybersecurity measures for critical transportation systems. Additionally, you will manage third-party cybersecurity requirements and oversee vulnerability management and incident resolution.

Job details

Req ID:533728 At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars. Could you be the full-time Project Cybersecurity Engineer in Saint-Bruno-de-Montarville, Canada, we’re looking for? Saint-Bruno is located on the South Shore of Montreal, and with an onsite presence of three days per week preferred, Alstom offers convenient shuttle services four times a day to make your commute easier! Your future role Take on a new challenge and apply your operational technology (OT) cybersecurity expertise in a cutting-edge field that impacts critical infrastructure and real-world operations. You’ll work alongside a passionate, collaborative, and highly specialized team of cybersecurity professionals. You'll play a key role in shaping the cybersecurity framework of critical transportation systems, ensuring safety, resilience, and innovation in a rapidly evolving industry. Day-to-day, you’ll work closely with teams across the business (engineering, project management, and external auditors), manage cybersecurity risks and vulnerabilities, and contribute to the development and implementation of robust cybersecurity measures. You’ll specifically take care of analyzing program security needs and conducting cybersecurity risk assessments, but also supporting third-party cybersecurity management and incident resolution. We’ll look to you for: Analyzing program security needs and conducting cybersecurity risk assessments Developing and implementing cybersecurity designs, including security architecture principles and controls Evaluating the project’s achieved cybersecurity level Managing third-party cybersecurity requirements and risks Overseeing cybersecurity vulnerability management and incident resolution Providing support during technical design meetings for cybersecurity activities Collaborate with other disciplines (Safety, Reliability, Software Quality, Train Control, Train Systems, Train Design) as required Optionally contributing to cybersecurity process and standard definitions, trend analysis, training and awareness programs, and peer review of cybersecurity deliverables All about you We value passion and attitude over experience. That’s why we don’t expect you to have every single skill. Instead, we’ve listed some that we think will help you succeed and grow in this role: Bachelor’s degree in engineering, electronics, computer science, or a related field Experience related to cybersecurity, with exposure to operational technology (OT) or industrial control systems (ICS) environments Cybersecurity certifications (preferred but not required) Knowledge of standards and regulations such as ISO 2700X, IEC 62443, and NIST Experience in information technology and operational technology security Familiarity with methods of risk analysis and security tools such as Wireshark, Nmap, Nessus, or Metasploit Understanding of network security, firewalls, intrusion detection systems, and cryptography Experience with embedded or industrial systems (e.g., railway, aerospace) is an asset Strong interpersonal skills to collaborate with cross-functional teams, customers, and suppliers Knowledge about infrastructure security concepts (servers, cloud) Things you’ll enjoy Join us on a life-long transformative journey – the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You’ll also: Enjoy stability, challenges, and a long-term career free from boring daily routines Work with cutting-edge cybersecurity standards and technologies to secure critical transportation systems Collaborate with transverse teams and helpful colleagues Contribute to innovative projects Utilise our inclusive, innovative, and forward-thinking working environment Steer your career in whatever direction you choose across functions and countries Benefit from our investment in your development, through award-winning learning Progress towards exciting career opportunities in cybersecurity and critical infrastructure protection Benefit from a fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension) Knowledge of a language other than French is an asset when dealing with our international partners, suppliers, colleagues and customers. In Quebec, French remains the main working language of our company. You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you! Important to note As a global business, we’re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.

What you’ll do

You will analyze program security needs, conduct risk assessments, and implement robust cybersecurity measures for critical transportation systems. Additionally, you will manage third-party cybersecurity requirements and oversee vulnerability management and incident resolution.

Requirements

The role requires a bachelor's degree in engineering, computer science, or a related field along with experience in cybersecurity, particularly within operational technology or industrial control systems. Familiarity with industry standards like IEC 62443 and NIST, as well as security tools, is essential for success.

Benefits

• Life insurance
• Medical insurance
• Pension plan
• Professional development
• Shuttle services

Listed skills

• Wireshark · Preferred
• Nessus · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity
• Operational technology
• Risk assessment
• Vulnerability management
• Incident resolution
• Security architecture
• Network security
• Firewalls
• Intrusion detection systems
• Cryptography
• Industrial control systems
• ISO 2700X
• IEC 62443
• NIST
• Wireshark
• Nessus
• Project Management
• Operations
• Reliability
• Innovation
• Resilience
• French Language
• Firewall
• Network Security
• IT Security Architecture
• Information Technology
• Interpersonal Communications
• Risk Analysis
• Computer Science
• Cyber Security
• Vulnerability Management
• External Auditing
• Infrastructure Security
• Trend Analysis
• Workplace Inclusivity
• Software Quality (SQA/SQC)
• Technical Design
• Transport Networks
• Industrial Control Systems
• Language Interpretation
• Peer Review
• Cyber Security Standards
• NIST Cybersecurity Framework (CSF)
• Security Tools
• Metasploit
• Intrusion Detection Systems
• Cyber Engineering
• Cyber Security Assessment
• Cyber Security Management
• ISO/IEC 27000 Series

Job areas

• Security & Safety
• Technology
• Engineering
• Transportation
• Lead Cybersecurity Engineer
• Cyber Security Engineer
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

More jobs from Transport AI