Infrastructure&Cybersecurity

Location:

Turin, Piedmont, Italy

Job ID:

R0019670

Date Posted:

2023-07-11

Company Name:

HITACHI RAIL STS S.P.A.

Profession (Job Category):

IT, Telecom & Internet

Job Schedule:

Full time

Remote:

No

Job Description:

Job Description

An exciting opportunity for an enthusiastic self-motivated Cybersecurity Engineer to join a global organization that has an aspiration to produce world-class products and services to support their Digital transformation programme with modern platforms and applications. Cloud-based technology and infrastructure will mostly underpin the new platforms and applications, however in some cases there will also be a requirement to implement onto traditional on-premise infrastructure.

The role will suit an individual with that has a background in secure software development security as well as cloud and infrastructure security. The individual will be working in a new security team that will support the Digital Team on all aspects of Cyber and Information security. The successful candidate will have chance to use their knowledge and experience to influence the direction of the security for the Digital Team. Hitachi will be looking for an individual who is able to work to a high standard, comfortable working with teams and can interact with suppliers, customers and stakeholders.

The position is based in Turin, Italy.

Who We Are

Hitachi Rail is a fully integrated, global provider of rail solutions across rolling stock, signalling, service & maintenance, digital technology and turnkey. With a presence in 38 countries across three continents and over 14,000 employees, our mission is to contribute to society through the continuous development of superior rail transport solutions. Hitachi Rail is now focusing on the digital solutions for their Mobility function which is where the role will be based.

Accountabilities

The role will touch many different areas of security, ranging from architecture design, development, testing and deployment, particularly onto cloud/on-premise environments.

The role can be summarized into the following activities:

• Provide technical oversight and assurance of the security of the digital solutions being developed for Hitachi, from an architectural, design, development and deployment perspective

• Undertake specific security verification and validation activities on the digital products once they have been delivered

• Work with the cloud deployment and infrastructure teams to help design the environments for Hitachi products and services, ensuring they are deployed securely and in line with compliance and best practice

• Assist the Head of Infrastructure and Cybersecurity in promoting secure digital projects across the Hitachi organization

• Support, as necessary, the security of the digital products and services on bids, proof-of-concept and delivery projects

• Provide the necessary guidance on the implementation of security components into the on-prem and cloud-based solutions, for example Identity & Access Management (IAM), API gateways, Secrets Management and Key vaults

• Maintain a continuous awareness of the threat landscape, attack vectors and surface that could threaten the digital products and services

• Undertaking any cloud security assessments on suppliers and vendors

Required Skills/Knowledge:

• Hands on experience of cloud platforms and infrastructure, covering Azure, AWS and Google Cloud

• Knowledge and understanding of Linux, HTML, Javascript, JSON and REST APIs

• Familiarity with the Agile/Scrum methodology

• Experience in threat modelling and vulnerability management, including the detection, analysis and remediation of security threats and vulnerabilities facing on-prem and cloud environments

• Understanding of security best practices, regulations and standards, particularly those applicable to the cloud

• Familiarity of the secure software development lifecycle, including security best practices such as CIS Top 20, OWASP top 10 risks

• Exposure to SAST, SCA and DAST tools used through cloud development, testing and integration cycles, e.g. Snyk for Container scanning

• Knowledge and experience of security monitoring tools, configuration management tools, host virtualisation, containerisation, vulnerability scanners, proxies, WAFs

• Good understanding of DevSecOps principles, activities and toolsets to support CI/CD pipelines

• Knowledge of security operations, in particular security logging and alerting and SIEM tools

• Awareness of security standards and regulations such as NIST 800-53, ISO27001, PCI DSS, GDPR

Education/Qualifications

Engineering Degree.

Languages

Fluent Knowledge of English (written & spoken).

We thank all applicants for their interest; however, only those under consideration will be contacted. Join us athttps://www.hitachirail.com/careers/ .

It is our commitment at Hitachi Rail to create a diverse environment and we are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

We would be delighted if you would be one of our follower!

Have a glance to our LinkedIn page https://www.linkedin.com/company/hitachirail