Cyber Security Engineer

Thales Group; São Bernardo do Campo; Hybrid; BRL 180,000 - 240,000; Full time

Benefits offered by this job

Health & Dental plans

Retirement savings plan

Paid holidays

Life Insurance

Job summary

Thales in São Bernardo do Campo is hiring a Cyber Security Engineer to help protect radar and related systems. The role focuses on designing secure architectures, deploying perimeter defenses, and maintaining secure Linux deployments.

You will work in a hybrid model, collaborate with software and OT teams, and contribute to vulnerability management and regulatory compliance across projects.

Qualifications

• Bachelor's degree in networks, Telecommunications, Computer Science, Cybersecurity, or related field.
• Advanced English.
• Linux kernel high-level knowledge.
• Experience in design, development, and/or security testing of cybersecurity-oriented products.
• Perimeter security deployment and integration.
• Stormshield UTM firewall management.
• Network devices configuration (switches/routers/VPN).
• Scripting and configuration (python, bash, yml, ansible, robot framework).
• Jira, Gitlab with Pipelines, Artifactory.

Responsibilities

• Define network & cybersecurity architectures for radar systems (security-by-design).
• Design secure LAN/WAN/VPN infrastructures and communication flows.
• Produce/maintain architecture diagrams & technical documentation.
• Deploy and administer perimeter security solutions and manage firewall policy.
• Configure switches, routers, VPN gateways, security appliances and troubleshoot.
• Validate cybersecurity functions (AV, integrity, certificates) and LDAP authentication.
• Support secure Linux-based radar hosting and conduct integration/testing.
• Execute regression testing and test campaigns; ensure regulatory compliance.
• Maintain GitLab Pipelines for correct build and security gates.

Skills

Security architectures

LAN/WAN/VPN security

Firewall configuration

LDAP/Access control

Linux kernel knowledge

Education

Bachelor's degree in networks or CS

Tools

Jira

Gitlab with Pipelines

Artifactory

Job description

## Cyber Security EngineerApply: Hybrid: São Bernardo Do Campo: Full time: Posted Today: R0342367Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.**Cyber Security Engineer**This position is **hybrid** model in our **São Bernardo do Campo** unit.**Position Summary**The Cyber Security Specialist is responsible for maintaining and enhancing the security of software systems by deploying security patches and conducting system installations and regression tests. This role involves validating key cyber security features, including antivirus, integrity, certificate management, roles and flow matrix, firewall configurations, and LDAP authentication. The specialist will automate verification tests and regression test campaigns, document deployment procedures, and contribute to vulnerability analysis. In addition, they will support and train software and system teams on the use and deployment of cyber features, manage vulnerabilities and risks in collaboration with customers, and assist customers in developing and maintaining Operational Technology security practices. This includes undertaking asset discovery activities, providing guidance within the threat environment, and ensuring compliance with relevant security standards and procedures.**Key Areas of Responsibility** * Define network & cybersecurity architectures for radar systems (security-by-design from design phase);* Design secure LAN/WAN/VLAN/DMZ/VPN infrastructures and communication flows (segmentation, access control, hardening);* Produce/maintain architecture diagrams & technical documentation aligned with project standards;* Deploy and administer perimeter security solutions (e.g., Stormshield UTM) and manage/firewall policy enforcement;* Configure/administer switches, routers, VPN gateways, security appliances and troubleshoot network issues;* Validate cybersecurity functions: AV, integrity, certificates, and verify authentication/authorization(e.g., LDAP, roles/access matrices) ;* Support secure installation/upgrades for Linux-based radar hosting; conduct integration & FAT/SAT readiness;* Execute regression testing & system validation (Robot Framework), support test automation and test campaigns;* Verify compliance with cybersecurity standards and customer/regulatory requirements;* Perform risk assessments, technical reviews, and hardening activities;* Analyze logs for troubleshooting/anomaly resolution; ensure traceability (requirements → tests → results) ;* Manage vulnerabilities/risks (tracking findings, support RCA, customer follow-up);* Support training/enablement for SW/system/customer teams; assist OT practices (asset discovery, threat-informed guidance, compliance);* Maintain GitLab Pipelines to ensure correct Build of the Solution (quality/security gates). **Minimum Qualifications*** Bachelor’s degree in networks, Telecommunications, Computer Science, Cybersecurity, or a related field or any other related field in university [with a speciality in Cryptology, Systems or Cybersecurity];* English: Advanced;* Linux kernel high-level knowledge;* Experience in the design, development, and/or security testing of cybersecurity-oriented products such as IP encrypts or firewalls;* Deploy and integrate perimeter security solutions;* Install, configure, and administer Stormshield UTM firewalls;* Configure network devices including switches, routers, VPNs, and security appliances;* Specific expertise on a hardware or software security topic (e.g. intrusion detection (HIDS), Secure Boot, antivirus, integrity check (Aide), syslog management, certificates management, LDAP);* Packaging, deployment and/or troubleshooting of Linux in the context of embedded systems;* Scripting and configuration (python, bash, yml, ansible, robot framework);* System Engineering tools: Jira, Gitlab (With Pipelines), Artifactory. If you’re excited about working with Thales, but not meeting the requirements for this position, we encourage you to join our Talent Community!**What We Offer** Thales provides an extensive benefits program for all full-time employees working 30 or more hours per week and their eligible dependents, including the following: * Elective Health and Dental plans;* Retirement Savings Plan with a company contribution and a match;* Company paid holidays, vacation days, and paid sick leave;* Company provided Life Insurance.**Why Join Us?**Say HI and learn more about working at Thales *click here**.*#LI-HybridThales champions inclusion and we believe diversity strengthens the fabric of our culture.Thales is an Equal Opportunity Employer, all qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, age, or any other characteristic protected by law.At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!