Cyber Security Engineer

Thales; São Bernardo do Campo; Hybrid; BRL 180,000 - 240,000; Full time

Benefits offered by this job

Health plan

Dental plan

Paid holidays and leave

Life Insurance

Job summary

Thales in São Bernardo do Campo is seeking a Cyber Security Engineer to maintain and enhance software security, deploy patches, and run regression tests. You will validate antivirus, certificates, LDAP authentication, and automate tests, document deployment procedures, and support teams in applying cyber controls.

The role includes designing secure radar-system architectures, deploying perimeter security, configuring devices, performing risk assessments, and ensuring regulatory compliance while

Job description

Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.

Cyber Security Engineer

This position is hybrid model in our São Bernardo do Campo unit.

Position Summary

The Cyber Security Specialist is responsible for maintaining and enhancing the security of software systems by deploying security patches and conducting system installations and regression tests. This role involves validating key cyber security features, including antivirus, integrity, certificate management, roles and flow matrix, firewall configurations, and LDAP authentication. The specialist will automate verification tests and regression test campaigns, document deployment procedures, and contribute to vulnerability analysis. In addition, they will support and train software and system teams on the use and deployment of cyber features, manage vulnerabilities and risks in collaboration with customers, and assist customers in developing and maintaining Operational Technology security practices. This includes undertaking asset discovery activities, providing guidance within the threat environment, and ensuring compliance with relevant security standards and procedures.

Key Areas of Responsibility

• Define network & cybersecurity architectures for radar systems (security-by-design from design phase);
• Design secure LAN/WAN/VLAN/DMZ/VPN infrastructures and communication flows (segmentation, access control, hardening);
• Produce/maintain architecture diagrams & technical documentation aligned with project standards;
• Deploy and administer perimeter security solutions (e.g., Stormshield UTM) and manage/firewall policy enforcement;
• Configure/administer switches, routers, VPN gateways, security appliances and troubleshoot network issues;
• Validate cybersecurity functions: AV, integrity, certificates, and verify authentication/authorization(e.g., LDAP, roles/access matrices);
• Support secure installation/upgrades for Linux-based radar hosting; conduct integration & FAT/SAT readiness;
• Execute regression testing & system validation (Robot Framework), support test automation and test campaigns;
• Verify compliance with cybersecurity standards and customer/regulatory requirements;
• Perform risk assessments, technical reviews, and hardening activities;
• Analyze logs for troubleshooting/anomaly resolution; ensure traceability (requirements → tests → results);
• Manage vulnerabilities/risks (tracking findings, support RCA, customer follow-up);
• Support training/enablement for SW/system/customer teams; assist OT practices (asset discovery, threat-informed guidance, compliance);
• Maintain GitLab Pipelines to ensure correct Build of the Solution (quality/security gates).

Minimum Qualifications

• Bachelor’s degree in networks, Telecommunications, Computer Science, Cybersecurity, or a related field or any other related field in university [with a speciality in Cryptology, Systems or Cybersecurity];
• English: Advanced;
• Linux kernel high-level knowledge;
• Experience in the design, development, and/or security testing of cybersecurity-oriented products such as IP encrypts or firewalls;
• Deploy and integrate perimeter security solutions;
• Install, configure, and administer Stormshield UTM firewalls;
• Configure network devices including switches, routers, VPNs, and security appliances;
• Specific expertise on a hardware or software security topic (e.g. intrusion detection (HIDS), Secure Boot, antivirus, integrity check (Aide), syslog management, certificates management, LDAP);
• Packaging, deployment and/or troubleshooting of Linux in the context of embedded systems;
• Scripting and configuration (python, bash, yml, ansible, robot framework);
• System Engineering tools: Jira, Gitlab (With Pipelines), Artifactory.

What We Offer

Thales provides an extensive benefits program for all full-time employees working 30 or more hours per week and their eligible dependents, including the following:

• Elective Health and Dental plans;
• Retirement Savings Plan with a company contribution and a match;
• Company paid holidays, vacation days, and paid sick leave;
• Company provided Life Insurance.

#LI-Hybrid

Thales champions inclusion and we believe diversity strengthens the fabric of our culture.

Thales is an Equal Opportunity Employer, all qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, age, or any other characteristic protected by law.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.