Arbetsbeskrivning

Avaron AB is a growing consultancy focused on technology, finance, and business support. We match your expertise with the market's most interesting assignments, offering a platform where your professional development is central.

We are looking for an experienced Cybersecurity Engineer to support a customer in a critical product development environment within railway signaling. You will be embedded in both the Cybersecurity function and the Product Development teams, ensuring cybersecurity requirements are implemented across the electronic product development lifecycle. The role involves close collaboration with design teams, suppliers, and stakeholders to ensure security objectives, regulations, and best practices are met.

• Analyze security needs, including applicable laws and local regulations, and define security objectives and risk strategies.
• Plan and coordinate cybersecurity activities throughout the development lifecycle, including effort and timeline estimation.
• Produce core cybersecurity deliverables such as threat models, vulnerability analyses, and secure development principles.
• Translate and cascade security requirements to suppliers and support third-party risk management.
• Define and maintain cybersecurity operating procedures.
• Conduct security testing and assess the cybersecurity level of developed products.
• Provide cybersecurity input in technical design discussions and reviews.
• Manage vulnerabilities, cybersecurity issues, and action plans.
• Support audits and evidence collection to demonstrate compliance with cybersecurity standards.

• University or engineering degree in embedded systems, telecommunications, or cybersecurity.
• Minimum 5 years of experience within railway signaling.
• Knowledge of system and network architecture concepts.
• Knowledge of operating systems and relevant programming languages.
• Understanding of techniques for evaluating system security.
• Ability to work autonomously in complex environments.

• Knowledge of cybersecurity standards and regulations such as CRA, IEC 62443, NIST, and NIS.
• Experience with cybersecurity risk analysis methods.

Selections are made on an ongoing basis, so we recommend that you apply as soon as possible.