{"id":3455956,"url":"https://alion.io/job/alstom-railway-ot-cybersecurity-architect","title":"Railway & OT Cybersecurity Architect","company":{"id":445391,"name":"Alstom","domain":"alstom.com","url":"https://alion.io/company/alstom","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Haifa, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":105000,"max_usd":251000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"PKI","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-01T20:14:46Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Purpose of the position\nThe Project Cybersecurity Architect is responsible for defining, maintaining and governing cybersecurity architectures for railway and infrastructure projects in Israel.\nThe initial assignment will support the Haifa-Nazareth Nofit Light Rail Project. The position may subsequently support other projects according to business priorities and workload.\nThe role translates contractual, operational, safety and technical requirements into secure and resilient architectures, cybersecurity requirements and risk-treatment measures.\nOrganisation structure\nAlstom Transport Israel\nDigital and Integrated Systems\nIsrael Cybersecurity Organisation\nReports directly to\nIsrael Cluster Cybersecurity Manager\nLocation and mobility\nPrimary location: Holon, Israel\nRegular travel to project sites, customer premises and supplier locations may be required\nInitial assignment: Haifa-Nazareth Nofit Light Rail Project\nMain responsibilities\nDefine, maintain and govern project cybersecurity architectures throughout the system lifecycle.\nPerform cybersecurity risk assessments, threat modelling and attack-path analysis.\nDefine security zones, conduits, trust boundaries and defence-in-depth principles for IT, OT and railway environments.\nTranslate contractual, regulatory and risk-driven needs into clear and verifiable cybersecurity requirements.\nAllocate cybersecurity requirements to systems, subsystems, products, interfaces and suppliers.\nMaintain traceability between cybersecurity risks, security objectives, architecture controls, requirements and verification evidence.\nReview system and subsystem architectures, network designs, interfaces and data flows for cybersecurity compliance and consistency.\nAssess network segmentation, firewall policy, remote access, identity and privileged access, PKI, monitoring, hardening, backup and vulnerability-management solutions.\nPrepare and maintain cybersecurity architecture descriptions, risk assessments, detailed-design documents, zoning diagrams and technical review records.\nLead cybersecurity technical reviews and support project design and lifecycle gate reviews.\nReview supplier and subcontractor cybersecurity architectures, technical evidence and compliance documentation.\nDefine compensating controls where remediation is constrained by legacy technology, safety, certification, vendor dependency or operational availability.\nSupport cybersecurity verification, factory acceptance testing, system integration testing, site testing, commissioning and transition to operation.\nAssess the cybersecurity impact of vulnerabilities, technical changes, deviations and nonconformities.\nProvide technical guidance to project teams, system architects, engineers, suppliers and other stakeholders.\nEscalate unresolved architecture risks and deviations through the applicable project and cybersecurity governance.\nContribute to reusable cybersecurity architecture patterns, peer reviews, lessons learned and continuous improvement across projects in Israel.\nAuthority and performance measures\nAct as the technical reference for cybersecurity architecture within the assigned project scope.\nRequest relevant technical evidence, design clarification and corrective-action proposals.\nRecommend acceptance, conditional acceptance, rejection or escalation of cybersecurity design decisions.\nDeliver cybersecurity architecture outputs according to agreed quality and schedule commitments.\nEnsure timely closure or escalation of architecture-review comments, technical findings and design nonconformities.\nThe employee shall promote the Alstom Code of Ethics and maintain high standards of professional conduct, integrity and confidentiality.\nMain required competences\nEducational requirements\nBachelor's or master's degree in cybersecurity, computer science, software engineering, systems engineering, electrical engineering, communications engineering or a comparable technical discipline.\nMandatory professional experience\nSignificant professional experience in cybersecurity architecture, systems architecture, network security architecture or secure system design.\nExperience performing cybersecurity risk assessments and translating their results into architecture controls and technical requirements.\nExperience reviewing complex system and subsystem architectures, interfaces, network flows and security controls.\nExperience working with multidisciplinary engineering, project-management and supplier teams.\nExperience producing controlled technical documentation and presenting technical decisions to stakeholders.\nTechnical skills\nCybersecurity architecture and secure-by-design principles.\nIT and OT network architecture, segmentation, zoning and secure conduits.\nCybersecurity risk assessment, threat modelling and risk-treatment methods.\nIdentity and access management, privileged access and secure remote access.\nFirewalls, IDS/IPS, network access control and security gateways.\nPKI, certificate lifecycle management, encryption and key management.\nSecurity logging, monitoring, detection and SIEM integration.\nSystem hardening, secure configuration and vulnerability management.\nBackup, recovery, resilience and business-continuity principles.\nRequirements engineering, traceability and technical verification.\nSupplier and third-party cybersecurity assurance.\nStandards and frameworks\nISA/IEC 62443\nCLC/TS 50701 or the applicable railway cybersecurity reference\nISO/IEC 27001 and ISO/IEC 27005\nNIST Cybersecurity Framework and relevant industrial-control-system guidance\nDesirable experience\nExperience in railway, transportation, operational technology, industrial control systems or other critical-infrastructure environments.\nExperience with long-lifecycle, safety-related or high-availability systems.\nExperience supporting detailed design, integration, testing, commissioning or customer design reviews.\nExperience working in multi-company or public-infrastructure projects.\nBehavioural competencies\nStrong systems thinking, analytical and problem-solving capabilities.\nPragmatic and risk-based technical decision-making.\nAbility to work autonomously while remaining aligned with project governance.\nAbility to challenge technical designs constructively and influence stakeholders.\nStrong written and verbal communication skills.\nAbility to work effectively in a multicultural and multidisciplinary environment.\nHigh standards of professional ethics, accountability and confidentiality.\nLanguages\nProfessional proficiency in written and spoken English.\nHebrew is an advantage.\nDesirable certifications\nCISSP, ISSAP, CISM, GICSP, SABSA, TOGAF, ISA/IEC 62443 certification or equivalent.","description_format":"text","description_chars":6659,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":true}]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Rail Transport"],"lifecycle":[{"event":"open","at":"2026-10-29T12:38:13Z"}],"visa":[],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.894,"p_room":0.9,"age_days":6,"expected_fill_days":16,"reasons":["conf:7","velocity","win:mid","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/alstom-railway-ot-cybersecurity-architect","json_url":"https://alion.io/job/alstom-railway-ot-cybersecurity-architect.json","meta":{"generated_at":"2026-11-02T05:14:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7641,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":445391},"rest":"https://alion.io/mcp/rest/get_company?id=445391"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falstom-railway-ot-cybersecurity-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falstom-railway-ot-cybersecurity-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falstom-railway-ot-cybersecurity-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alstom-railway-ot-cybersecurity-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falstom-railway-ot-cybersecurity-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3455956}},{"tool":"search_jobs","arguments":{"company":"alstom.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3455956},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}