Project Cybersecurity Engineer

About the role

Alstom is seeking a Project Cybersecurity Engineer to lead cybersecurity activities throughout contract execution for Canada’s busiest public transit system. You will work on risk assessments, security architecture, vulnerability management and support the development of cybersecurity standards.

Key responsibilities

• Perform cybersecurity risk assessments and design security architectures with additional controls.
• Evaluate cybersecurity solutions, manage third‑party security, and resolve vulnerabilities and incidents.
• Monitor emerging threats and technologies, contributing to trend‑watch activities.
• Define and improve cybersecurity processes and standards.
• Provide coaching, awareness training and peer‑review of cyber deliverables across projects.

Required profile

• Bachelor’s degree in Engineering, Electronics, Computer Science or a related field.
• Relevant cybersecurity certifications (e.g., GICSP, CISSP, GSEC, CISM, CEH) preferred.
• Experience in IT security, preferably within railway or industrial environments.
• Familiarity with standards such as ISO 2700X, IEC 62443, NIST and NIS.
• Understanding of the security market and key vendors.

Required skills

• Risk analysis methods (ISO 27005, Ebios).
• Security architecture concepts for systems, networks and operating systems.
• Tools: Wireshark, Nmap, OpenVAS, Nexpose, Metasploit, Nessus, Burp Suite.
• Encryption tools: TrueCrypt, OpenSSL.
• Firewall and VPN configuration (iptables, OpenVPN).
• Vulnerability management, incident response, GRC, IAM, DLP, PKI, SOC, IDS/IPS, SAP security.

What we offer

• Opportunity to contribute to a low‑carbon mobility project.
• Work within a global leader in transportation solutions.
• Professional development in a highly innovative environment.