Description

You will own the execution and reporting of Vulnerability Assessments for critical infrastructure.

Responsibilities

• Define the test plan for Vulnerability Assessment prior to testing commencement.
• Perform grey box VA against systems in a lab test environment.
• Conduct vulnerability identification and assessment via network-based scanning and component scanning across the OCC2 network boundary.
• Generate detailed reports and present findings from the VA process.
• Execute re-testing of agreed findings and update subsequent reports.

Required Skills

• 8–15 years of cybersecurity experience, with 3–5 years specifically in the rail/metro sector.
• Proven experience in consultancy or advisory roles on large infrastructure or railway projects.
• Familiarity with project lifecycle stages, including design, tendering, and system integration.
• Proficiency in network scanning, host scanning, application scanning, and database scanning for vulnerabilities.
• Bachelor's or Master's degree in Cybersecurity, IT, Electronics, or Railway Engineering.
• Experience performing OS configuration reviews against CIS benchmarks.

Key Skills

Education

Bachelor's or Master's degrees