Jobs via Dice
Cyber Security Engineer
Burnaby, British Columbia, Canada
Long term
Role Objective:
To provide expert advisory and assurance services on cybersecurity for railway systems across the
planning, design, and procurement
stages of the project. The role includes guiding clients on cybersecurity requirements, compliance, Preparation of Cyber Security Framework design and Technical Specification, Risk assessment and risk mitigation in alignment with international standards and project-specific goals.
Key Responsibilities:
Defining a test plan for VA before the start of testing.
Performing grey box VA on the system in a lab test environment
Vulnerability identification and assessment, through network-based scanning and vulnerability scan of system components accessible through boundaries of OCC2 network. Vulnerability assessment shall most likely involve on all commodity applications devices: a. Network Scans to identify possible network security vulnerabilities. b. Host scans to identify potential security vulnerabilities. c. Applications scans. d. Database scans.
Detailed reporting and briefing on VA findings.
Re-testing of agreed findings during the test window.
Report update based on the re-tests. The following VA services may also be required and should be quoted separately:
Operating System (OS) configuration review against applicable CIS benchmark.
Additional re-test of findings (once the findings have been addressed) and report update.
Qualifications Education:
Bachelor’s or Master’s in Cybersecurity, IT, Electronics, or Railway Engineering
Preferred Certifications:
CISSP, CISM, IEC 62443 Certified Expert, CEH, or equivalent
Knowledge of CENELEC 50126/50128/50129 is desirable
Experience:
8–15 years of cybersecurity experience with at least 3–5 years in rail/metro sector
Proven experience in consultancy or advisory roles on large infrastructure or railway projects Seniority level: Mid-Senior level
Employment type: Full-time
Job function: Information Technology
Industries: Software Development
#J-18808-Ljbffr
Long term
Role Objective:
To provide expert advisory and assurance services on cybersecurity for railway systems across the
planning, design, and procurement
stages of the project. The role includes guiding clients on cybersecurity requirements, compliance, Preparation of Cyber Security Framework design and Technical Specification, Risk assessment and risk mitigation in alignment with international standards and project-specific goals.
Key Responsibilities:
Defining a test plan for VA before the start of testing.
Performing grey box VA on the system in a lab test environment
Vulnerability identification and assessment, through network-based scanning and vulnerability scan of system components accessible through boundaries of OCC2 network. Vulnerability assessment shall most likely involve on all commodity applications devices: a. Network Scans to identify possible network security vulnerabilities. b. Host scans to identify potential security vulnerabilities. c. Applications scans. d. Database scans.
Detailed reporting and briefing on VA findings.
Re-testing of agreed findings during the test window.
Report update based on the re-tests. The following VA services may also be required and should be quoted separately:
Operating System (OS) configuration review against applicable CIS benchmark.
Additional re-test of findings (once the findings have been addressed) and report update.
Qualifications Education:
Bachelor’s or Master’s in Cybersecurity, IT, Electronics, or Railway Engineering
Preferred Certifications:
CISSP, CISM, IEC 62443 Certified Expert, CEH, or equivalent
Knowledge of CENELEC 50126/50128/50129 is desirable
Experience:
8–15 years of cybersecurity experience with at least 3–5 years in rail/metro sector
Proven experience in consultancy or advisory roles on large infrastructure or railway projects Seniority level: Mid-Senior level
Employment type: Full-time
Job function: Information Technology
Industries: Software Development
#J-18808-Ljbffr