Project Cybersecurity Engineer

Alstom Transport India Ltd; Bengaluru; On-site; INR 2,000,000 - 5,000,000; Full time

Job summary

Alstom Transport India Ltd in Bengaluru seeks a senior Project Cybersecurity Engineer to drive cybersecurity design, risk assessment, and incident resolution across railway and transport systems. You will collaborate with engineering, IT, and operations teams, perform risk analyses, and implement robust security measures.

You will contribute to security evaluations, third‑party risk management, and training initiatives while staying aligned with industry standards and best practices.

Qualifications

• Bachelor’s degree in a relevant field (BE/B.Tech)
• 7+ years of cybersecurity experience
• Understanding of risk analysis methods (ISO 27005, Ebios)
• Knowledge of standards like ISO 2700X, 62443, NIST, NIS or LPM

Responsibilities

• Contribute to tender, project, and program cybersecurity activities
• Perform cybersecurity risk assessments
• Design security architecture and implement security controls
• Oversee vulnerability management and incident resolution

Skills

Risk assessment

Security architecture

Threat modelling

Cybersecurity awareness

Education

BE/B.Tech in a relevant field

Tools

Wireshark

Nmap

OpenVAS

Nessus

Metasploit

Job description

Project Cybersecurity Engineer At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, 80,000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Could you be the full-time Project Cybersecurity Engineer in Bangalore we’re looking for?

Your future role

Take on a new challenge and apply your cybersecurity expertise in a cutting-edge field. You’ll work alongside dynamic and innovative teammates. You'll contribute to ensuring the safety and resilience of our transportation systems, protecting critical infrastructure from cyber threats. Day-to-day, you’ll work closely with teams across the business (engineering, IT, and operations), conduct risk assessments, and implement robust cybersecurity measures, and much more. You’ll specifically take care of cybersecurity design and risk assessment, but also vulnerability management and incident resolution.

We’ll look to you for:

• Contributing to tender, project, and program cybersecurity activities
• Performing cybersecurity risk assessments
• Designing security architecture and implementing additional security controls
• Conducting cybersecurity evaluations
• Managing third-party cybersecurity risks
• Overseeing vulnerability management and incident resolution
• Optionally participating in norms and standards committees
• Ensuring cyber trend monitoring (e.g., new threats, technologies, etc.)
• Defining and contributing to cybersecurity processes and standards
• Supporting and deploying cybersecurity knowledge through coaching, awareness sessions, and training programs
• Peer reviewing cybersecurity deliverables from other projects and programs

All about you

We value passion and attitude over experience. That’s why we don’t expect you to have every single skill. Instead, we’ve listed some that we think will help you succeed and grow in this role:

• A bachelor’s degree (BE/B.Tech) or higher in a relevant field
• 7+ years of experience in cybersecurity or related fields
• Understanding of cybersecurity risk analysis methods (e.g., ISO 27005, Ebios)
• Knowledge of key standards and regulations, such as ISO 2700X, 62443, NIST, NIS, or French LPM
• Familiarity with security solutions and concepts, such as BRP/DRP, GRC, IAM, DLP, PKI, SOC, IDS/IPS, SAP security
• Technical proficiency in at least two areas, such as system/network architecture, operating systems, or programming languages
• Experience with tools like Wireshark, Nmap, OpenVAS, Nexpose, Metasploit, Nessus, or BURP
• Understanding of encryption tools (e.g., Truecrypt, Openssl) and low-level filtering (e.g., Firewalls, Iptables, OpenVPN)
• Experience in intrusion testing techniques
• Knowledge or experience in embedded or industrial systems (e.g., railway or aeronautics) is a plus
• A dynamic, autonomous, and creative mindset with the ability to work in complex environments

Things you’ll enjoy

Join us on a life-long transformative journey – the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You’ll also:

• Enjoy stability, challenges, and a long-term career free from boring daily routines
• Work with new security standards for rail signalling
• Collaborate with transverse teams and helpful colleagues
• Contribute to innovative projects
• Utilise our flexible and inclusive working environment
• Steer your career in whatever direction you choose across functions and countries
• Benefit from our investment in your development, through award-winning learning
• Progress towards senior cybersecurity roles or management positions
• Benefit from a fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension)
• You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud.

Important to note

As a global business, we’re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.

Experience Level Senior Level