Cybersecurity Design Engineer

ph3Job Description /h3 pWe are seeking a Cybersecurity Design Engineer to join our team and ensure the security of our embedded products. The sought candidate will have strong technical knowledge in secure architecture, cryptography, and compliance standards, combined with good communication and problem‑solving skills. /p h3Key Responsibilities /h3 ul liDesign and implement secure architectures for embedded products and networked devices. /li liPerform threat modeling and risk analysis using frameworks such as STRIDE. /li liWrite security manuals for customers. /li liEnforce and support secure coding practices for C/C++ and Python. /li liSupport implementation of secure boot, firmware integrity checks, and hardware root of trust. /li liSupport configuration and hardening of Linux‑based operating systems. /li liHelp conduct vulnerability assessments, penetration testing, and integrate security into CI/CD pipelines. /li liEnsure compliance with IEC 62443 (4‑1 and 4‑2) and ISO 27001 standards. /li liCollaborate with cross‑functional teams to communicate risks and propose mitigations. /li /ul h3Required Hard Skills /h3 ul liNetwork Communication Security: TCP/IP, UDP protocols (MQTT, SFTP, FTPS, NTP, RTP, DHCP, DNS, etc.), TLS/SSL implementation. /li liCryptography: Symmetric asymmetric encryption (AES, RSA, ECC), key management, hashing algorithms (SHA‑2, SHA‑3), HMAC. /li liPublic Key Infrastructure (PKI). /li liSecure Architecture Design: Threat modeling, risk analysis, secure boot, firmware integrity, hardware root of trust. /li liImplementation: Linux hardening, secure configuration of services (SSH, firewall, etc.). /li liVulnerability Assessment Testing: Static/dynamic code analysis tools (e.g., Coverity, BlackDuck), fuzzing, web UI security testing, CI/CD security integration. /li liStandards Compliance: IEC 62443, ISO 27001 basics. /li /ul h3Required Soft Skills /h3 ul liAbility to work autonomously and manage priorities effectively. /li liStrong communication skills for internal and external stakeholders. /li liProficiency in English (written and spoken). /li /ul h3Preferred Qualifications /h3 ul liExperience with embedded systems security. /li liFamiliarity with secure product development lifecycle practices. /li /ul h3Benefits /h3 ul liRegular full‑time contract, CCNL Metalmeccanico. /li liSalary range: 35,800 – 58,000€. /li liSmart working: 2 days per week. /li liTraining and professional growth opportunities. /li liBenefits, including flexible work hours, canteen, welfare platform, non‑work related accident insurance, tax assistance and electric car charging station. /li /ul h3Legal EEO Statements /h3 pLa ricerca è rivolta a candidature di entrambi i sessi, ai sensi delle leggi 903/77 e 125/91, e a persone di tutte le età e tutte le nazionalità, ai sensi dei decreti legislativi 215/03 e 216/03. Faiveley Transport Italia Spa effettuerà il trattamento dei dati personali dei candidati nel rispetto della normativa sulla privacy. /p pLegal authorization to work in EU is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. /p /p #J-18808-Ljbffr