Description

You will own the execution and reporting of Vulnerability Assessments for critical infrastructure.

This role is on-site.

Responsibilities

• Define test plans for Vulnerability Assessments prior to commencement.
• Perform grey box VA against systems in lab test environments.
• Conduct vulnerability identification via network-based and component scanning across the OCC2 network boundary.
• Generate detailed reports and present findings from the VA process.
• Execute re-testing of agreed findings and update subsequent reports.

Required Skills

• 8–15 years of cybersecurity experience, with 3–5 years specifically in the rail/metro sector.
• Proven experience in consultancy or advisory roles on large infrastructure or railway projects.
• Proficiency in network, host, application, and database scanning for vulnerabilities.
• Experience performing OS configuration reviews against CIS benchmarks.
• Familiarity with project lifecycle stages, including design, tendering, and system integration.
• Bachelor's or Master's degree in Cybersecurity, IT, Electronics, or Railway Engineering.
• CISSP and CISM certifications.

Key Skills

Education

Bachelor's or Master's degrees