Introduction
This role aligns with SNC-Lavalin’s ambition to embrace Digital technologies and be an industry leader in Digital Engineering Services.
The opportunity presented, provides an opening for the successful candidate to contribute to the growing global demand for world class Cyber Security services, in particular: in the specialised field of Industrial Control Systems (ICS).
Situated in the System & Safety Assurance directorate, the cyber security engineering team analyzes ICS system elements as well as proposed network architectures, to identify the actual and potential vulnerabilities associated with the project elements. The cyber security engineer defines and proposes; technological solutions, processes and systems for the protection of facilities and people, through delivery of a resilient digital infrastructure
Your primary responsibilities:
- Provide cybersecurity expertise for Industrial Control Systems; in a rail and transit context
- Planning of all the cybersecurity activities needed for major rail and transit project from: requirements management, early feasibility phases, through design, test and commissioning, into the revenue demonstration and operations
- Perform the cybersecurity threat, vulnerabilities and risk assessments by identifying all the critical assets and engaging the involved stakeholders
- Derive and cascade the cybersecurity requirements to the suppliers and be engage in the procurement activities for the cybersecurity aspect
- Perform, and eventually lead a team to perform, the necessary analysis to provide all the required evidence to support the project requirements
- Liaise with the design and construction team to ensure the cybersecurity activities and requirements are being implemented by the project team and by the suppliers
- Review cyber security submissions from suppliers, and designers, and provide detailed technical comments
- Plan, prepare and implement a cybersecurity testing strategy to validate the infrastructure are resilient to external and internal threats
- Manage client relationships, and advise clients on recommended actions relating to active projects
- Deliver review assignments in allocated timescales to meet overall project deadlines
- Identify opportunities for new work, and lead the development of bid materials in own area of expertise
Essential Requirements:
- Computer Programming, Networking or Telecommunications Engineering degree, or equivalent
- 5 years minimum experience in the application of one or more of the following branches of IT/Network Engineering:
- Information Technology / Datacentre
- Telecommunications / Network
- Automation / SCADA / Control Systems
- Computer Sciences
- The candidate will possess in-depth experience in the IT/Networking field with most recent experience having come from any three of the following areas;
- Working in a Security Operations Centre (SOC) or in a Computer Emergency Response Team (CERT/CIRT)
- Penetration testing
- Application security
- Malware Reverse Engineering
- Threat Intelligence
- Security Architecture
- Industrial Control Systems Security
- Telecom and Network security
- System or Network administration in a complex multi-national network
- Knowledge of NIST and ISO270001 cybersecurity frameworks and APTA cybersecurity consideration for public transit an asset
- Excellent communication skills, both written and verbal
- Proficient in Microsoft Office, including Excel, Word and Outlook
- The ability to work effectively remotely within an extended team
- Bilingual French / English
Desired Requirements:
- Experience in rail and transit or Industrial Control System field preferred and willing to go the “extra mile” to learn more about the rail and transit business
- Professional Engineer (PEng), or European equivalent: CEng (Chartered Engineer) certified and / or working towards these accreditations
- CompTIA Network+, CompTIA Security+, GICSP, CISSP or equivalent certifications held
Founded in 1911, SNC-Lavalin is a global fully integrated professional services and project management company and a major player in the ownership of infrastructure. From offices around the world, SNC-Lavalin's employees are proud to build what matters. Our teams provide comprehensive end-to-end project solutions – including capital investment, consulting, design, engineering, construction, sustaining capital and operations and maintenance – to clients in oil and gas, mining and metallurgy, infrastructure and power. On July 3, 2017, SNC-Lavalin acquired Atkins, one of the world's most respected design, engineering and project management consultancies. http://www.snclavalin.com
At SNC-Lavalin, we seek to hire individuals with diverse characteristics, backgrounds and perspectives. We strongly believe that world-class talent makes no distinctions based on gender, ethnic or national origin, sexual identity and orientation, age, religion or disability, but enriches itself through these differences.
