IT Security Engineer – Railway Cybersecurity

About the role

Siemens Mobility is looking for an experienced IT Security Engineer to lead cybersecurity integration for Communications‑Based Train Control (CBTC) Grade of Automation 4 projects. You will ensure that railway signalling systems meet Singapore’s Cybersecurity Code of Practice and other industry regulations.

Key responsibilities

• Design, implement and validate cybersecurity measures for CBTC GoA4 systems across multiple railway projects.
• Maintain cybersecurity plans, threat models, risk and vulnerability assessments specific to signalling environments.
• Conduct security reviews, gap analyses and support secure configuration of network and OT components.
• Coordinate incident response planning, testing and audit activities, including penetration testing.
• Provide training and awareness on cybersecurity best practices to internal stakeholders.
• Collaborate with regulatory bodies for compliance reporting.

Required profile

• Bachelor’s degree in Information Security, Computer Science, Engineering or related field.
• 3–6 years of cybersecurity experience, preferably in critical infrastructure or transportation.
• Familiarity with Singapore’s CCoP v2 and Critical Information Infrastructure (CII) requirements.
• Strong analytical, problem‑solving and communication skills.
• Proactive, self‑motivated and organized.

Required skills

• CISSP, CISM, GICSP or ISO 27001 Lead Implementer/Auditor certifications (optional but a plus).
• Knowledge of NIST, ISO 27001 and IEC 62443 frameworks.
• Experience with network security tools, IDS/IPS, SIEM and endpoint protection.
• Secure architecture design for OT/ICS/SCADA environments.
• Risk management for both IT and OT.
• Understanding of railway signalling systems, especially CBTC GoA4.

What we offer

• Flexible working arrangements.
• Career, professional and personal development opportunities.