Product Security Analyst Bei televic Rail

ppBecome part of an binternational growing company. /b /ppYou get the chance to work on bexciting and challenging projects /b. We never stop innovating or experimenting with new technological advances. /ppbA transparent career path /bwith btraining possibilities /b. /ppThere are plenty of times to connect with colleagues: bteambuilding, company events, on-site fit sessions, /b... /ppYou have the possibility to work in a bflexible environment /b.

We offer
a bhome working policy /bfor two days a week. /ppbIn addition to /b an attractive salary,

we offer
a bpersonalized Televic Bonus Plan /band blegal benefits /b. /ppbExplore your role with us /b /ppIn this role, you focus on banalyzing /b, bvalidating /b, and bensuring cybersecurity /bacross our products and complex integrated customer systems. You help guarantee that bsecurity is correctly applied throughout the full product lifecycle /b
- from design and development to deployment and operational use. /ppYou bplay a key role in the ongoing transition /btowards a model where product and project teams take ownership of security implementation, while the cybersecurity team focuses on validation, governance, and knowledge sharing. bYou work closely with engineering /b, bsystem /b, band project teams /bto bassess risks /b, bvalidate security controls /b, and bensure compliance with standards such as IEC 62443 /band the bCyber Resilience Act (CRA) /b. /ppWhere Cybersecurity Engineers build reusable security solutions, byou ensure that these solutions are correctly applied, validated, and aligned with risks in real products and projects /b. /ppYour responsibilities in a nutshell: /ppbCybersecurity Analysis Risk Management /b /ppPerform and lead Threat Risk Analyses (TRA) for products and integrated customer systems /ppIdentify attack scenarios, assess risks, and define mitigation priorities /ppEvaluate vulnerabilities and ensure proper follow-up of remediation actions /ppbSecure Development Lifecycle (SDLC) Governance /b /ppEnsure that cybersecurity requirements are correctly applied across the full development lifecycle /ppVerify both technical controls and correct application of the Secure Development Lifecycle (SDLC) process /ppAct as a review authority for security quality gates during product and project execution /ppbProduct Project Security Assurance /b /ppReview design, implementation, and testing outputs to validate security /ppEnsure alignment between reusable product security capabilities and their application in customer projects /ppSupport integrated projects where multiple systems are combined /ppbMonitoring, Detection Vulnerability Follow-up /b /ppDefine and assess security monitoring and detection capabilities (logging, alerting, traceability) in line with CRA expectations /ppFollow up on security alerts and incidents and support mitigation actions /ppSupport vulnerability management in the operational phase in line with SLA (Service Level Agreement) commitments /ppCoordinate the governance side of vulnerability management together with the cybersecurity team development teams /ppFollow up on security alerts and incident reports, analyze technical details, and support mitigation actions /ppbDocumentation Communication /b /ppTranslate cybersecurity risks and findings into clear and structured documentation /ppSupport customer-facing documentation (security reports, compliance evidence) /ppCommunicate risks and recommendations to both technical and non-technical stakeholders /ppAct as a central cybersecurity contact for engineering and project teams /ppbHow you can add value to our team /b /ppbBackground in system engineering, product development, technical project management, cybersecurity or security operations /b. /ppbStrong analytical mindset project management affinity /bthat brings you the ability to assess and prioritize risks, and bcommunicate /b with technical and non-technical stakeholders. /ppYou can bring additional value if you have experience with: /ppSecurity on bembedded systems /b. /ppbIEC 62443, Cyber Resilience Act (CRA) /b, ISO 27001, NIS2 or similar standards. /p /p