Cyber Security Engineer

Sécheron Hasler Group; Villafranca di Verona; In loco; EUR 35.000 - 55.000; Tempo pieno

Descrizione del lavoro

A multinational technology firm is seeking a CyberSecurity Engineer in Villafranca di Verona. The role involves ensuring compliance with railway regulations, conducting penetration tests, and supporting product security certifications. Candidates should have a Bachelor's degree in a related field and 2 years of experience in cybersecurity. The position offers career growth and the opportunity to work in an international team.

Servizi

Interesting work experience in an international company

Possibility of travelling

Professional and career growth opportunities

Encouragement for initiative and operational excellence

Competenze

• 2 years of experience in cybersecurity (preferably product security).
• Good knowledge of written and spoken English (preferred B1 level).
• Proficiency in vulnerability assessment and penetration testing.
• Understanding of safety-critical system architecture and constraints.

Mansioni

• Ensure compliance with railway-specific regulations.
• Conduct penetration tests on railway products and systems.
• Maintain audit trails for security controls.
• Create test documentation and execute tests.

Conoscenze

Cybersecurity knowledge

Analytical skills

Problem-solving skills

Team-oriented mindset

IT skills

Formazione

Bachelor's degree in computer engineering, electronics, telecommunications or equivalent

Strumenti

Linux operating system

Vulnerability assessment tools

Penetration testing tools

Polarion tools

Issue tracking management (Redmine, Bugzilla)

Descrizione del lavoro

Job Overview

Sécheron Hasler Italia is seeking a CyberSecurity Engineer to join the Integration Verification & Testing Department as a Test Engineer. The selected candidate will work closely with the IVT Manager and Product Integrity Manager, contributing to writing test cases and carrying out functional testing on electronic devices for use in the railway sector.

Key Responsibilities

• Ensure compliance with railway-specific regulations (IEC 62443 and CLC / TS 50701)
• Support the security certifications of the products
• Coordinate with regulatory bodies and certification authorities
• Maintain audit trails and documentation for security controls
• Conduct penetration tests on railway products and systems
• Perform vulnerability scanning and security audits
• Execute testing on hybrid OT / IT environments
• Develop and maintain security test cases and scenarios
• Manage security incidents affecting products
• Coordinate responsible disclosure processes with external vendors
• Track and remediate identified vulnerabilities
• Support post-incident analysis and process improvements
• Analysis of system functional requirements and software functional requirements.
• Development of test strategies to be applied according to the specific level required (distributed system, device, electronic board).
• Definition of test specifications (test cases), with the possibility of using automated management tools.
• Development of scripts, subroutines and/or programmes written in high-level language.
• Definition of the test bench and coordination of its implementation, with the support of hardware and software resources available in-house or externally.
• Creation of test documentation (test plan, test procedures, test reports).
• Execution of tests and drafting of reports, assisted by integrated management systems (e.g. Polarion tools).
• Tracking of test cases on covered requirements.
• Identification of bugs, their classification into major and minor issues, reporting in management systems (e.g. issue tracking management Redmine, Bugzilla).
• Reporting on the progress of tests.

Requirements

• Bachelor's degree in computer engineering, electronics, telecommunications or equivalent.
• 2 years of experience in cybersecurity (preferably product security).
• Good knowledge of written and spoken English (preferred B1 level).
• Knowledge of the Linux operating system is preferred.
• OT / IT security knowledge - critical for railway domain.
• Proficiency in vulnerability assessment and penetration testing.
• Experience with security or safety-critical systems.
• Understanding of safety-critical system architecture and constraints.
• Previous experience in railway, transportation, or critical infrastructure sectors.
• Minimum experience in software design and/or testing of electronic equipment, preferably in the railway, automotive or industrial automation sectors.
• Knowledge of scripting languages.
• Strong analytical and problem-solving skills.
• Team-oriented mindset and goal-driven approach.
• Willingness to travel short distances for training and coordination with the group's European units.
• Solid IT skills.

Benefits

• Interesting work experience in an international company.
• Possibility of travelling.
• Professional and career growth within the Italian and parent company.
• We give our employees full responsibility for their work tasks. We encourage all employees to take initiative and contribute to the operational excellence of the company, and we provide ample opportunities for them to achieve their personal and professional growth goals.

If our offer appeals to you and you meet the above requirements, please apply!

This a direct recruitment, we ask agencies to abstain from submitting unsolicited profiles.

Secheron Hasler Group is committed to creating a diverse & inclusive environment and hence welcomes applications from all sections of the community.

For more information, please visit our website; https://www.secheron.com. You can also find us on Linkedin.