VAC - Engineer - Cyber Security (ICT & IT/OT)

Deutsche Bahn Ag; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Deutsche Bahn Ag in Bengaluru seeks an experienced cybersecurity leader to design and implement security strategies for rail and metro projects across design, tendering, and deployment stages.

You will advise clients on CBTC, SCADA, BMS, and rail systems, ensuring compliance with IEC 62443, ISO/IEC 27001, TS 50701, and local regulations while performing risk assessments, threat modeling, and vendor evaluations.

Qualifications

• 8-15 years of cybersecurity experience with 3-5 years in rail/metro sector.
• Experience in consultancy or advisory and designer roles on large infrastructure projects.
• Familiarity with project lifecycle stages, especially design, tendering, and system integration.

Responsibilities

• Develop cyber security strategy and framework for railway projects.
• Advise on cybersecurity requirements for CBTC, TVS, BMS, SCADA, AFC, rolling stock, and rail systems.
• Prepare comprehensive cyber security requirements tailored to regulations and best practices.
• Implement verification and validation for risk assessments, threat modeling, and vulnerability analyses.
• Client and stakeholder management for cyber security works.
• Ensure compliance with IEC 62443, ISO/IEC 27001, TS 50701, and local regulations.
• Tender preparation: define technical specifications and evaluation criteria.
• Support tender team and clients to define evaluation criteria and attend pre-bid meetings.

Skills

Cybersecurity strategy

Threat modeling

Vulnerability analysis

Client management

Education

Bachelor's or Master's in Cybersecurity, IT, Electronics, or Railway Engineering

Tools

IEC 62443

ISO/IEC 27001

TS 50701

Local regulations knowledge

Job description

Job Summary

Railways for the world of tomorrow.

Responsibilities

• Develop cyber security strategy and framework for railway and metro projects.
• Advise client organizations on cybersecurity requirements for CBTC (GOA4 Opera-tion), TVS, BMS, SCADA, Telecom, AFC, Rolling stock and other rail systems.
• Development of comprehensive set of cybersecurity requirements for the project, tailored to local regulations and best practices.
• Implement verification and validation stage for cyber risk assessments, threat modeling, and vulnerability analysis to assess the compliance of proposed rail system solutions with the technical and functional requirements.
• Client and Stakeholder management for Cyber Security related works
• Ensure compliance with following standards as minimum:
  • IEC 62443 (Industrial Network Security) and upcoming latest standards
  • ISO/IEC 27001
  • TS 50701 (Cybersecurity for railway applications)
  • Local and national cybersecurity regulations.
• Good Understanding of Private and Public Cloud networks platforms, Virtualized Machine/Storage architecture and different applications used for VM/storage.
• Responsible for tender preparation, including defining technical specifications and evaluation criteria for cyber-related scopes.
• Support to tender team and client to define the evaluation criteria for the technical proposal submitted by contractors, preparation of query response and attending the pre-bid meetings if required.

Qualifications

• Bachelor's or Master's in Cybersecurity, IT, Electronics, or Railway Engineering
• Preferred Certifications in CISSP, CISM, IEC 62443 Certified Expert, CEH, or equivalent
• Knowledge of CENELEC 50126/50128/50129 is desirable
• 8-15 years of cybersecurity experience with at least 3-5 years in rail/metro sector
• Proven experience in consultancy or advisory and designer roles on large infrastructure or railway/Metro projects. Experience in Gulf/European projects is an added advantage.
• Familiarity with project lifecycle stages, especially design, tendering, and system integration
• Understanding of Server Configuration, Virtualization and other related latest technologies is an added advantage.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.