Internship: Product Cybersecurity — Attack-Chain Risk Modeling

ALSTOM Gruppe; Villeurbanne; On-site; EUR 11,000 - 17,000; Part time

Job summary

Alstom is offering a 6-month internship in Product Cybersecurity (Cyber Attack Chain) in Villeurbanne, France. You will develop scalable methodologies to identify plausible cyber attack chains in railway architectures and assess their feasibility, criticality, likelihood, and impact.

You will validate approaches with real-world use cases and contribute to improving risk management practices across connected railway solutions. Start January 2027, 6 months, international collaboration.

Qualifications

• Pursuing a Master’s or Engineering degree in Cybersecurity or related field.
• Strong interest in cybersecurity risk assessment, threat analysis, and attack modeling.
• Understanding of complex architectures, industrial or embedded systems.
• Analytical mindset and ability to structure complex technical problems.
• Curiosity for applied cybersecurity research and emerging methods.
• Ability to work autonomously while collaborating with international teams.
• Excellent technical writing and communication skills.
• Fluent English, both written and spoken.

Responsibilities

• Review and assess methodologies related to attack path modeling, threat analysis, and cybersecurity risk assessment.
• Analyze data sources, system information, and cybersecurity artifacts in Alstom projects and risk management activities.
• Design a practical and scalable methodology for identifying plausible cyber attack chains across railway architectures.
• Develop mechanisms to evaluate feasibility, criticality, likelihood, and impact of attack scenarios.
• Validate the proposed approach through representative railway cybersecurity use cases and architectures.
• Define and apply metrics to measure effectiveness, scalability, and operational value of the methodology.
• Produce recommendations for integrating attack chain analysis into Alstom's cybersecurity risk management processes.
• Contribute to continuous improvement of cybersecurity practices protecting connected railway solutions.

Skills

Cybersecurity

Threat modeling

Attack path analysis

Analytical mindset

Technical writing

English fluency

Education

Master's degree

Engineering degree

Tools

MITRE ATT&CK

Job description

Alstom is offering a 6-month internship in Product Cybersecurity (Cyber Attack Chain) in Villeurbanne, France. You will develop scalable methodologies to identify plausible cyber attack chains in railway architectures and assess their feasibility, criticality, likelihood, and impact.

You will validate approaches with real-world use cases and contribute to improving risk management practices across connected railway solutions. Start January 2027, 6 months, international collaboration.