At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, 80,000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Could you be the full-time Project Cybersecurity Manager in [Bangalore] we’re looking for?

Eductational Qualification:

• Any Batchelor Degree (BE/B.Tech) and above.

Proffessional Experience:

• Min 7+ years and above

Key Accountabilities:

Contribute to Tender / Project / Programs Cyber security activities such as:

• Cybersecurity Risks Assessment

  
  

• Cybersecurity Design (Security Architecture principles, additional security controls)

  
  

• Cybersecurity Evaluation

  
  

• Cybersecurity 3rdparty management

  
  

• Cybersecurity Vulnerability Management and incident resolution 

  
  

Optionally, or if expert : 

• Participates to norms & standards committee

  
  

• Ensure cyber trend watch (new threats, new techno, ...) 

  
  

• Contribute to Cybersecurity process and standard definition

  
  

• Support and deploy cybersecurity knowledge and processes (coaching, awareness & trainings) 

  
  

• Peer review of cyber deliverables from other Projects/Programs

  
  

Competencies & Skills

• Experience related to Cybersecurity or hacking in general

  
  

• Main standards and regulations, such as: ISO 2700X, 62443, NIST, NIS, French LPM

  
  

• Knowledge of the security market and its key players;

  
  

• Knowledge of some security solutions and areas, such as: BRP / DRP, GRC, IAM, DLP, PKI, SOC, IDS / IPS, SAP security, etc.

  
  

• Technical proficiency in at least 2 of the following field

  
  

• • Methods of risk analysis (ISO 27005, Ebios, etc.)

    
    

• • Architecture concepts and techniques of systems and networks, operating systems and associated programming languages.

    
    

• • Knowledge of the main techniques for evaluating systems security

    
    

• • Knowledge of tools of tools such as Wireshark, Nmap, OpenVAS, Nexpose, Metasploit, nessus, BURP

    
    

• • Encryption issues and tools (e.g. Truecrypt, Openssl)

    
    

• • Low level filtering (Firewall owners, Iptables, OpenVPN)

    
    

• • Intrusion testing techniques.

    
    

• Knowledge of Experience in embedded or industrial systems (railway / aeronautics ...) is a plus

  
  

• Dynamic, autonomous. Creativity and ability to work in a complex environment.

  
  

You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you!