OT/ICS security engineer in railway systems

Aubay Portugal; Lisboa; Hybrid; EUR 35,000 - 55,000; Full time

Benefits offered by this job

Health insurance with dental

Mental health platform

Hybrid work model

Team events

Job summary

Aubay Portugal приглашает специалиста по кибербезопасности для работы над критическими системами в железнодорожной отрасли. Вы будете интегрировать требования к безопасности в SCADA и распределённые инфраструктуры, выполнять риск-анализ и тестирование, а также настраивать SIEM/IDS и готовить документацию.

Требуется 2–5 лет опыта, знание стандартов и практика хардненинга ОС. Ожидается владение английским и португальским на уровне B2, гибридный режим работы.

Qualifications

• 2–5 лет опыта в кибербезопасности для критических систем.
• Знание стандартов: CENELEC TS 50701, IEC 62443, NIS2, DL 65/2021, CRA, ISO 27001/27002, NIST SP 800 серии.
• Опыт хардненинга ОС (Linux/Windows), сетевой безопасности (firewalls, IDS/IPS), виртуализации, IAM.
• Уровень английского и португальского B2.
• Сильная ориентация на клиента и командная работа.

Responsibilities

• Интегрировать требования к кибербезопасности в железнодорожные телекоммуникации и сигнальные системы, SCADA и распределённые инфраструктуры.
• Проводить оценку рисков, выявлять уязвимости и формулировать планы снижения риска.
• Проводить тестирование безопасности в контролируемых средах (робустность, fuzzing, threat modeling) и валидировать требования к оборудованию и ПО.
• Настраивать и эксплуатировать инструменты безопасности (SIEM, IDS/IPS, сканеры уязвимостей).
• Готовить понятную техническую документацию и общаться с менеджментом и заинтересованными лицами.

Skills

Cybersecurity

Risk assessment

Threat modeling

IAM

Security testing

Communication

Tools

SIEM

IDS/IPS

Vulnerability scanners

Linux

Windows

Virtualization

Job description

Описание:

At Aubay Portugal, we work daily with some of the largest organisations across sectors such as banking, insurance, telecommunications and energy, helping to build and evolve critical systems that support millions of users. We have been in Portugal since 2007 and are part of an international group with a presence in several European countries. More than technology, we build close relationships and deliver real-impact projects.

Задачи:

Integrate cybersecurity requirements into railway telecommunications and signaling systems, SCADA, and distributed infrastructures. Conduct risk assessments, identify vulnerabilities, and define mitigation plans, combining standards such as CENELEC 50701, IEC 62443, NIS2, and CRA. Execute security tests in controlled environments (robustness, fuzzing, threat modeling) and validate hardware, software, and system-level requirements. Configure and operate security and monitoring tools (SIEM, IDS/IPS, vulnerability scanners) and support technical teams in incident response. Produce clear technical documentation (requirements, analyses, reports) and communicate effectively with management and stakeholders.

Требования:

2 to 5 years of experience in cybersecurity applied to critical systems. In-depth knowledge of standards and regulations such as CENELEC TS 50701, IEC 62443, NIS2, DL 65/2021, CRA, ISO 27001/27002, and NIST SP 800 series. Proven experience in hardening operating systems (Linux/Windows), network security (firewalls, IDS/IPS), virtualization, and Identity and Access Management (IAM). Ability to perform security testing (robustness, fuzzing, secure OT pentesting), forensics, and threat modeling (STRIDE, MITRE ATT&CK). English and Portuguese level B2. Будет плюсом: Alignment with our corporate culture and a commitment to integrity and ethics are highly valued; Strong customer focus, teamwork, task prioritisation, and daily commitment are highly appreciated

Условия:

Continuous growth through our Training Academy, with technical and soft skills training, mentoring, tech communities, workshops and in-person meetups; Close support with regular feedback and a structured career advancement model; Comprehensive health insurance, including dental coverage, as well as access to a mental health platform and well-being initiatives; Team-oriented environment, including events and initiatives to promote connection and team spirit; Personal and family life support, from the moment your children are born and throughout their educational path; Access to a language platform with conversational classes in multiple languages; Project-tailored work model: Hybrid. A close-knit and informal environment, where direct communication is preferred and people are valued; Recognition of your contribution, with initiatives that celebrate meaningful moments; Freedom to be yourself, without unnecessary formalities; Teams where knowledge sharing, collaboration and joint growth are a reality.