Cybersecurity Engineer

Alstom Transportation; Bengaluru; On-site; INR 1,500,000 - 2,700,000; Full time

Job summary

Alstom Transportation in Bengaluru, India seeks a Cybersecurity Engineer to strengthen the security posture of its products and solutions. You will perform vulnerability assessments, penetration tests, and monitoring across teams, driving incident response and training initiatives.

The role emphasizes collaboration with Program Managers, Product Development, and regional cyber security managers, focusing on secure engineering practices and ongoing tool deployment.

Qualifications

• Bachelor's or Master's degree in CS/IT.
• 4+ years in vulnerability assessment and management.
• Experience with security tools such as Qualys, Kali Linux, Nessus, Burp Suite.
• Knowledge of networking (TCP/IP, OSI), OSs (Windows, UNIX), and security technologies (firewalls, IDS/IPS).
• Familiarity with programming/scripting languages (Java, Python, Shell).
• CEH or equivalent Pen Test certification (mandatory).
• Certifications: ISA 62443, OSCP, CISSP, GSEC, ECSA, CISM, CompTIA PenTest+.
• Experience with static analysis tools and software composition analysis.
• Understanding of ISO 2700X, ISA 62443, and NIST standards.
• Strong communication and problem-solving in a matrixed environment.

Responsibilities

• Perform vulnerability assessments, penetration tests, policy compliance scans, and web application scans using industry-standard tools.
• Evaluate system and product security by identifying and analyzing potential vulnerabilities.
• Monitor published vulnerabilities and security advisories, and alert relevant teams about potential impacts.
• Identify and deploying cybersecurity tools and practices, while providing training to users.
• Participate in incident response activities, including initial analysis and remediation workflows.
• Provide internal training on cybersecurity, vulnerability management processes, and tools.

Skills

Vulnerability assessment

Vulnerability management

Application security

Java

Python

Shell

CEH certification

ISA 62443

OSCP

GSEC

CISSP

CISM

Pen Test knowledge

Team collaboration

Networking knowledge

Education

Bachelor's or Master's in CS/IT

Tools

Qualys

Kali Linux

Nessus

Burp Suite

SCA tools

Job description

Job Summary

Could you be the full-time Cybersecurity Engineer in Bangalore were looking for

Your future role

Take on a new challenge and apply your cybersecurity expertise in a cutting-edge field. Youll work alongside a highly motivated and collaborative team of cybersecurity professionals.

You'll play a key role in maintaining and improving the security posture of Alstoms products and solutions. Day-to-day, youll work closely with teams across the business (such as Program Managers, Product Development Teams, and Regional Cybersecurity Managers), perform vulnerability assessments and penetration tests, and much more.

You'll specifically take care of vulnerability monitoring, scanning, and incident response, but also contribute to training and documentation for cybersecurity tools and processes.

Responsibilities

• Performing vulnerability assessments, penetration tests, policy compliance scans, and web application scans using industry-standard tools
• Evaluating system and product security by identifying and analyzing potential vulnerabilities
• Monitoring published vulnerabilities and security advisories, and alerting relevant teams about potential impacts
• Identifying and deploying cybersecurity tools and practices, while providing training and guidance to users
• Participating in incident response activities, including initial analysis and vulnerability remediation workflows
• Providing internal training on cybersecurity, vulnerability management processes, and tools

All about you

We value passion and attitude over experience. Thats why we dont expect you to have every single skill. Instead, weve listed some that we think will help you succeed and grow in this role:

• Bachelor's or Master's degree in Computer Science, Information Technology, or equivalent
• Experience in vulnerability assessment, vulnerability management, and application security (minimum 4+ years)
• Proficiency with security tools such as Qualys, Kali Linux, Nessus, Burp Suite, and others
• Knowledge of networking (TCP/IP, OSI model), operating systems (Windows, UNIX), and security technologies (firewalls, IDS/IPS)
• Familiarity with programming and scripting languages (e.g., Java, C, Python, Shell)
• CEH or equivalent Pen Test certification (mandatory)
• Preferred certifications: ISA 62443, OSCP, GICSP, CISSP, GSEC, ECSA, CISM, Comptia Pen Test+
• Experience with static analysis tools, software composition analysis tools, and configuration reviews
• Understanding of standards and regulations such as ISO 2700X, ISA 62443, and NIST
• Strong communication and problem-solving skills, with the ability to work in a complex, matrixed environment

Things you'll enjoy

• Join us on a life-long transformative journey the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You'll also:
• Enjoy stability, challenges, and a long-term career free from monotonous routines
• Work with new security standards for rail signalling
• Collaborate with cross-functional teams and supportive colleagues
• Contribute to innovative projects that make a global impact
• Utilise our flexible and inclusive working environment
• Steer your career in whatever direction you choose across functions and countries
• Benefit from our investment in your development, through award-winning learning opportunities
• Progress towards leadership roles or specialized technical paths
• Benefit from a fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension)

You dont need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, youll be proud.

Important to note

As a global business, were an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. Were committed to creating an inclusive workplace for everyone.