Cyber Security Engineer

Job Overview

Sécheron Hasler Italia is seeking a CyberSecurity Engineer to join the Integration Verification & Testing Department as a Test Engineer. The selected candidate will work closely with the IVT Manager and Product Integrity Manager, contributing to writing test cases and carrying out functional testing on electronic devices for use in the railway sector.

Key Responsibilities

• Ensure compliance with railway-specific regulations (IEC 62443 and CLC / TS 50701)
• Support the security certifications of the products
• Coordinate with regulatory bodies and certification authorities
• Maintain audit trails and documentation for security controls
• Conduct penetration tests on railway products and systems
• Perform vulnerability scanning and security audits
• Execute testing on hybrid OT / IT environments
• Develop and maintain security test cases and scenarios
• Manage security incidents affecting products
• Coordinate responsible disclosure processes with external vendors
• Track and remediate identified vulnerabilities
• Support post-incident analysis and process improvements
• Analysis of system functional requirements and software functional requirements.
• Development of test strategies to be applied according to the specific level required (distributed system, device, electronic board).
• Definition of test specifications (test cases), with the possibility of using automated management tools.
• Development of scripts, subroutines and/or programmes written in high-level language.
• Definition of the test bench and coordination of its implementation, with the support of hardware and software resources available in-house or externally.
• Creation of test documentation (test plan, test procedures, test reports).
• Execution of tests and drafting of reports, assisted by integrated management systems (e.g. Polarion tools).
• Tracking of test cases on covered requirements.
• Identification of bugs, their classification into major and minor issues, reporting in management systems (e.g. issue tracking management Redmine, Bugzilla).
• Reporting on the progress of tests.

Requirements

• Bachelor's degree in computer engineering, electronics, telecommunications or equivalent.
• 2 years of experience in cybersecurity (preferably product security).
• Good knowledge of written and spoken English (preferred B1 level).
• Knowledge of the Linux operating system is preferred.
• OT / IT security knowledge - critical for railway domain.
• Proficiency in vulnerability assessment and penetration testing.
• Experience with security or safety-critical systems.
• Understanding of safety-critical system architecture and constraints.
• Previous experience in railway, transportation, or critical infrastructure sectors.
• Minimum experience in software design and/or testing of electronic equipment, preferably in the railway, automotive or industrial automation sectors.
• Knowledge of scripting languages.
• Strong analytical and problem-solving skills.
• Team-oriented mindset and goal-driven approach.
• Willingness to travel short distances for training and coordination with the group's European units.
• Solid IT skills.

Benefits

• Interesting work experience in an international company.
• Possibility of travelling.
• Professional and career growth within the Italian and parent company.
• We give our employees full responsibility for their work tasks. We encourage all employees to take initiative and contribute to the operational excellence of the company, and we provide ample opportunities for them to achieve their personal and professional growth goals.

If our offer appeals to you and you meet the above requirements, please apply!

This a direct recruitment, we ask agencies to abstain from submitting unsolicited profiles.

Secheron Hasler Group is committed to creating a diverse & inclusive environment and hence welcomes applications from all sections of the community.

For more information, please visit our website; https://www.secheron.com. You can also find us on Linkedin.