Cybersecurity Engineer

Description

Job Summary: We are seeking a Cybersecurity Engineer with experience in critical systems within railway and industrial environments, focused on integration and compliance with cybersecurity requirements. Key Highlights: 1. Experience in cybersecurity for critical systems (Railway, ICS) 2. In-depth knowledge of cybersecurity standards and regulations 3. Solid experience in comprehensive risk assessments, vulnerability identification, impact evaluation, and definition of effective mitigation strategies What We Are Looking For: * Minimum of 2 years of professional experience as a Cybersecurity Engineer, with a strong focus on critical systems in environments such as Railway, Industrial Control Systems (ICS), or similar; * Proven competence in integrating, validating, and ensuring compliance of cybersecurity requirements for complex systems, including railway signaling, SCADA, and distributed infrastructures; * In-depth knowledge and practical application of major cybersecurity standards and regulations, such as IEC 62443 (OT Security), CENELEC TS 50701 (Cybersecurity for Railways), NIS2, DL 65/2021, CRA Cyber Resilience Act, ISO 27001/27002, and NIST SP 800 series; * Solid experience conducting comprehensive risk assessments, identifying vulnerabilities, evaluating impact, and defining effective mitigation strategies; * Practical expertise in security testing methodologies, including robustness testing, fuzzing, integration testing, and threat modeling—particularly in Operational Technology (OT) environments; * Familiarity with secure architecture design principles, security-by-design, and digital component evaluation for compliance with CRA and SBOM requirements; * Technical proficiency in operating system hardening (Linux/Windows), IT/OT network segmentation, firewall and IDS/IPS configuration, virtualization security, and Identity and Access Management (IAM); * Experience with security monitoring tools (SIEM, IDS/IPS, vulnerability scanners) and support for incident response, investigations, and cyber-crisis management; * Excellent communication skills, capable of producing clear technical documentation, presenting complex topics to diverse stakeholders, and providing expert guidance to engineering and product teams; * Fluency in English and Portuguese is mandatory for effective communication in both international and local contexts; * A university degree in Computer Engineering, Networks, Systems, or Security; relevant certifications (e.g., CISSP, CISM, CISA, CCSP, ISO 27001 Lead Implementer/Auditor, IEC 62443) are highly valued. What We Offer: * Comprehensive Health Insurance, including dental coverage; * Feedback & Coffee – regular feedback sessions and a structured Career Progression Model; * Aubay Training Academy, designed for your development: technical and behavioral training (in-person and e-learning), Meet & Techs, Webinars, Mentoring, and Technology Hubs; * Events and Team Building activities that strengthen team spirit and foster closeness; * Digital mental health and emotional well-being platform; * Health and well-being program, featuring workshops and initiatives for our employees, plus open community actions; * We grow with you and your family – we offer a Mini-Aubilous Kit upon the birth of your children and annual support for school supplies, from preschool through higher education; * Language platform offering conversational classes in 12 languages; * Work model: hybrid/remote based in Portugal or on-site. What Sets Us Apart? * Our organizational culture is grounded in strong values: commitment, excellence, teamwork, well-being and happiness, and empathy; * We value and recognize those who are part of our story, with referral awards and a special birthday gift; * We believe in authenticity: no dress code, because talent and attitude matter most; * We promote proximity and an informal environment; * Here, you’ll grow in good company, because we believe professional growth also means sharing experiences and building relationships.