Product Security Architect; m​/k – Kraków; Małopolskie), Polska Astek

Astek is a global partner in engineering consultancy and IT.

Product Security Architect (m/k)

Nowy Sącz, Poland - work from office (hybrid options available)

• Cybersecurity and regulatory compliance
  • Adapt products and processes to regulatory requirements and security standards for the railway sector and critical infrastructure.
  • Implement, audit, and advance compliance with PN-EN 62443, CENELEC TS 50716, ISO 27000 and the NIS2, CER, CRA regulations.
• Risk analysis and architectural security
  • Conduct risk analyses for IT/OT systems and recommend measures to mitigate threats.
  • Design secure network architecture with segmentation, firewalls, IDS/IPS, and VPN solutions.
  • Define security requirements for new and existing products.
• Technical analysis and diagnostics
  • Analyze network traffic, identify anomalies, vulnerabilities, and potential security incidents.
  • Create security reports and recommendations for infrastructure and product security.
  • Collaborate with project teams on threat analysis and security implementation.
• Product and railway system security
  • Oversee application of Secure SDLC principles and OWASP best practices.
  • Coordinate and evaluate results of security testing (SAST, DAST, penetration tests).
  • Analyze safety of on-board and diagnostic systems and control solutions for rail vehicles.
  • Ensure cyber resilience of communication buses and infrastructure used in rail vehicles.
• Collaboration and development
  • Work with project teams, engineers, auditors, and security experts.
  • Monitor regulatory changes and assess their impact on evolving products.
  • Actively participate in raising the organization's cyber security level and its products.

• Higher education in computer science, cyber security or related field.
• Minimum 2 years of experience in cyber risk analysis and management.
• In-depth knowledge of cyber security regulations and standards, including NIS2, CER, Cyber Resilience Act, National Cyber Security System laws, PN-EN 62443, CENELEC TS 50716, ISO 27000.
• Experience in designing and securing IT/OT environments.
• Strong understanding of network security topics such as DNS, routing, VPNs, authentication, and network segmentation.
• Proficiency with tools like Wireshark, Nmap, and network traffic analysis to identify threats.
• Experience with security systems such as firewalls, IDS/IPS, and security monitoring systems.
• Comfortable operating in Windows, Unix, and Linux environments.
• Knowledge of secure software development practices (OWASP, Secure SDLC, OWASP Top 10, SAST, DAST).
• Good understanding of the OSI model and industrial network architecture.
• English language proficiency at least B2.

• Certifications:
  
  CISSP, CEH, GIAC, CompTIA Security+.
• Experience in railway and rolling stock systems.
• Knowledge of control system architecture and diagnostic systems for rail vehicles.
• Familiarity with railway communication buses such as MVB, WTB, CAN, and railway Ethernet.

• Long-term collaboration.
• Technical training, certification, and skill development.
• Mentoring via Competence Center community.
• Clear career path.
• Employee benefits package:
  Multisport, private medical care, life insurance.
• Positive work environment with team-building events.

For more information, contact