Cybersecurity Testing & Commissioning (T&C) Engineer

Responsible for cybersecurity assurance activities throughout system integration, testing, commissioning and operational readiness phases, including cybersecurity validation, security testing, network segmentation verification, access control implementation, compliance assessment, risk management, incident support and coordination with engineering, V&V and project stakeholders to ensure secure and compliant deployment of railway operational technology systems. The role supports cybersecurity validation within the TLV-GL Testbed and production environments to reduce project risk and ensure successful project delivery, The Cybersecurity Testing & Commissioning Engineer is responsible for planning, developing, coordinating, and supporting cybersecurity testing activities during the Testing & Commissioning (T&C) phase of railway projects. The role ensures that cybersecurity controls, architectures, and integrations are validated before operational deployment., Testing Framework Development

• Develop and maintain the cybersecurity testing framework for project T&C activities.
• Define methodologies for validating cybersecurity controls and identifying vulnerabilities.
• Ensure testing activities align with project cybersecurity requirements and industry standards.

Test Scenario Definition

• Create cybersecurity test scenarios and test procedures.
• Develop vulnerability assessment methodologies.
• Define test evidence, acceptance criteria, and reporting requirements.

Technical Guidance

• Provide technical guidance to test teams on cybersecurity best practices.
• Support testers, subsystem teams, and integrators during cybersecurity validation activities.
• Assist in troubleshooting cybersecurity issues identified during testing.

Cybersecurity Validation & Commissioning

• Support execution of Factory Acceptance Tests (FAT), Site Acceptance Tests (SAT), IFAT, SFAT, commissioning, and integration testing.
• Verify implementation and effectiveness of cybersecurity controls.
• Participate in testing activities aligned with MITRE ATT&CK ICS/Enterprise methodologies.

Documentation & Reporting

• Prepare test procedures, test reports, and compliance evidence.
• Track vulnerabilities, non-conformities, and corrective actions.
• Support requirements traceability and compliance verification.

Commissioning, Testing, Internet Security, C Programming Language, Risk, Commissioning, Risk Management, Production Systems, Access Control, Internet Security, * B.Sc. in Cybersecurity, Computer Science, Information Security, Electrical Engineering, Communications Engineering, or related field., * 3-5+ years in OT/ICS cybersecurity, railway systems, industrial automation, or critical infrastructure.

• Experience in Testing & Commissioning activities.
• Experience with cybersecurity validation, vulnerability assessments, and security testing.

Technical Skills

• IEC 62443
• CLC/TS 50701
• MITRE ATT&CK for ICS
• Network security and segmentation
• Firewalls, IDS/IPS, SIEM
• Active Directory, PAM, NAC
• Windows/Linux administration
• OT/ICS environments and railway systems (advantage)

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.