Cybersecurity Design Engineer

Wabtec Corporation; Torino; Hybride; EUR 35 800 - 58 000; Plein temps

Avantages offerts par ce poste

Smart working: 2 days per week

Training and professional growth opportunities

Flexible work hours

Canteen

Welfare platform

Non-work related accident insurance

Tax assistance

Electric car charging station

Résumé du poste

Wabtec Corporation in Torino is seeking a Cybersecurity Design Engineer to ensure the security of embedded products. The role involves designing secure architectures, performing threat modeling, and collaborating with teams to mitigate risks.

Ideal candidates will have extensive knowledge in secure architecture, cryptography, and compliance standards, as well as excellent communication skills. The position offers a regular full-time contract, smart working options, and various benefits including training opportunities.

Qualifications

• Strong technical knowledge in secure architecture, cryptography, and compliance standards.
• Ability to work autonomously and manage priorities effectively.
• Strong communication skills for internal and external stakeholders.

Responsabilités

• Design and implement secure architectures for embedded products and networked devices.
• Perform threat modeling and risk analysis using frameworks such as STRIDE.
• Write security manuals for customers.
• Enforce and support secure coding practices for C/C++ and Python.
• Support implementation of secure boot and firmware integrity checks.
• Conduct vulnerability assessments and penetration testing.

Connaissances

Network & Communication Security

Cryptography

Public Key Infrastructure (PKI)

Secure Architecture & Design

Implementation

Vulnerability Assessment & Testing

Standards & Compliance

Communication Skills

Autonomy and Prioritization

English Proficiency

Outils

Coverity

BlackDuck

Description du poste

Job Description

We are seeking a Cybersecurity Design Engineer to join our team and ensure the security of our embedded products. The sought candidate will have strong technical knowledge in secure architecture, cryptography, and compliance standards, combined with good communication and problem‑solving skills.

Key Responsibilities

• Design and implement secure architectures for embedded products and networked devices.
• Perform threat modeling and risk analysis using frameworks such as STRIDE.
• Write security manuals for customers.
• Enforce and support secure coding practices for C/C++ and Python.
• Support implementation of secure boot, firmware integrity checks, and hardware root of trust.
• Support configuration and hardening of Linux‑based operating systems.
• Help conduct vulnerability assessments, penetration testing, and integrate security into CI/CD pipelines.
• Ensure compliance with IEC 62443 (4‑1 and 4‑2) and ISO 27001 standards.
• Collaborate with cross‑functional teams to communicate risks and propose mitigations.

Required Hard Skills

• Network & Communication Security: TCP/IP, UDP protocols (MQTT, SFTP, FTPS, HTTPS, NTP, RTP, DHCP, DNS, etc.), TLS/SSL implementation.
• Cryptography: Symmetric & asymmetric encryption (AES, RSA, ECC), key management, hashing algorithms (SHA‑2, SHA‑3), HMAC.
• Public Key Infrastructure (PKI).
• Secure Architecture & Design: Threat modeling, risk analysis, secure boot, firmware integrity, hardware root of trust.
• Implementation: Linux hardening, secure configuration of services (SSH, firewall, etc.).
• Vulnerability Assessment & Testing: Static/dynamic code analysis tools (e.g., Coverity, BlackDuck), fuzzing, web UI security testing, CI/CD security integration.
• Standards & Compliance: IEC 62443, ISO 27001 basics.

Required Soft Skills

• Ability to work autonomously and manage priorities effectively.
• Strong communication skills for internal and external stakeholders.
• Proficiency in English (written and spoken).

Preferred Qualifications

• Experience with embedded systems security.
• Familiarity with secure product development lifecycle practices.

Benefits

• Regular full‑time contract, CCNL Metalmeccanico.
• Salary range: 35,800 – 58,000€.
• Smart working: 2 days per week.
• Training and professional growth opportunities.
• Benefits, including flexible work hours, canteen, welfare platform, non‑work related accident insurance, tax assistance and electric car charging station.

Legal & EEO Statements

La ricerca è rivolta a candidature di entrambi i sessi, ai sensi delle leggi 903/77 e 125/91, e a persone di tutte le età e tutte le nazionalità, ai sensi dei decreti legislativi 215/03 e 216/03. Faiveley Transport Italia Spa effettuerà il trattamento dei dati personali dei candidati nel rispetto della normativa sulla privacy.

Legal authorization to work in EU is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.