Cybersecurity Engineer

Cyber Security Engineer
Burnaby, British Columbia, Canada
Long term

Role Objective:
To provide expert advisory and assurance services on cybersecurity for railway systems across the planning, design, and procurement stages of the project. The role includes guiding clients on cybersecurity requirements, compliance, Preparation of Cyber Security Framework design and Technical Specification, Risk assessment and risk mitigation in alignment with international standards and project-specific goals.
Key Responsibilities:

• Defining a test plan for VA before the start of testing.
• Performing grey box VA on the system in a lab test environment
• Vulnerability identification and assessment, through network-based scanning and vulnerability scan of system components accessible through boundaries of OCC network. Vulnerability assessment shall most likely involve on all commodity applications devices: a. Network Scans to identify possible network security vulnerabilities. b. Host scans to identify potential security vulnerabilities. c. Applications scans. d. Database scans.
• Detailed reporting and briefing on VA findings.
• Re-testing of agreed findings during the test window.
• Report update based on the re-tests. The following VA services may also be required and should be quoted separately:
• Operating System (OS) configuration review against applicable CIS benchmark.
• Additional re-test of findings (once the findings have been addressed) and report update.

Qualifications:
Education:

• Bachelor's or Master's in Cybersecurity, IT, Electronics, or Railway Engineering

Preferred Certifications:

• CISSP , CISM, IEC Certified Expert, CEH, or equivalent
• Knowledge of CENELEC // is desirable

Experience:

• – years of cybersecurity experience with at least – years in rail/metro sector
• Proven experience in consultancy or advisory roles on large infrastructure or railway projects
• Familiarity with project lifecycle stages, especially design, tendering, and system integration