OT/ICS security engineer in railway systems

At Aubay Portugal, we work daily with some of the largest organisations across sectors such as banking, insurance, telecommunications and energy, helping to build and evolve critical systems that support millions of users. We have been in Portugal since 2007 and are part of an international group with a presence in several European countries. More than technology, we build close relationships and deliver real-impact projects.

• Integrate cybersecurity requirements into railway telecommunications and signaling systems, SCADA, and distributed infrastructures.
• Conduct risk assessments, identify vulnerabilities, and define mitigation plans, combining standards such as CENELEC 50701, IEC 62443, NIS2, and CRA.
• Execute security tests in controlled environments (robustness, fuzzing, threat modeling) and validate hardware, software, and system-level requirements.
• Configure and operate security and monitoring tools (SIEM, IDS/IPS, vulnerability scanners) and support technical teams in incident response.
• Produce clear technical documentation (requirements, analyses, reports) and communicate effectively with management and stakeholders.

• 2 to 5 years of experience in cybersecurity applied to critical systems.
• In-depth knowledge of standards and regulations such as CENELEC TS 50701, IEC 62443, NIS2, DL 65/2021, CRA, ISO 27001/27002, and NIST SP 800 series.
• Proven experience in hardening operating systems (Linux/Windows), network security (firewalls, IDS/IPS), virtualization, and Identity and Access Management (IAM).
• Ability to perform security testing (robustness, fuzzing, secure OT pentesting), forensics, and threat modeling (STRIDE, MITRE ATT&CK).
• English and Portuguese level B2.
• Будет плюсом: Alignment with our corporate culture and a commitment to integrity and ethics are highly valued; Strong customer focus, teamwork, task prioritisation, and daily commitment are highly appreciated

• Continuous growth through our Training Academy, with technical and soft skills training, mentoring, tech communities, workshops and in-person meetups;
• Close support with regular feedback and a structured career advancement model;
• Comprehensive health insurance, including dental coverage, as well as access to a mental health platform and well-being initiatives;
• Team-oriented environment, including events and initiatives to promote connection and team spirit;
• Personal and family life support, from the moment your children are born and throughout their educational path;
• Access to a language platform with conversational classes in multiple languages;
• Project-tailored work model: Hybrid.
• A close-knit and informal environment, where direct communication is preferred and people are valued;
• Recognition of your contribution, with initiatives that celebrate meaningful moments;
• Freedom to be yourself, without unnecessary formalities;
• Teams where knowledge sharing, collaboration and joint growth are a reality.