Security Validation (Audit & Pentest) Specialist

Job Summary

Could you be the full-time Security Validation Manager in [LOCATION] were looking for

Take on a new challenge and apply your expertise in security validation and risk management in a cutting-edge field. You'll work alongside collaborative and forward-thinking teammates.

You'll play a critical role in protecting Alstoms solutions, services, and infrastructure by defining and executing security validations like audits and penetration tests. Day-to-day, you'll work closely with teams across the business (e.g., IT, infrastructure, and application development teams), manage external suppliers, and maintain the lifecycle of the Azure environment used for validations, and much more.

Youll specifically take care of onboarding and offboarding users in the Azure environment, maintaining virtual systems, and supporting risk assessments, but also designing actionable information security dashboards.

Responsibilities

• Defining and following up on individual security validations (audits and penetration tests) with external suppliers
• Managing external suppliers and their deliverables
• Maintaining the lifecycle of the Security Validations Azure environment, including onboarding/offboarding users and managing virtual systems
• Supporting risk assessments and developing policies, standards, and guidelines
• Analyzing test results and engaging stakeholders to implement remediation
• Providing guidance on additional security controls to prevent vulnerabilities
• Documenting tactics and procedures used for security assessments
• Reproducing penetration testing results to verify remediation efforts

Requirements

• Degree in Computer Science, Cybersecurity, or a related field
• Experience or understanding of security assessments, including penetration testing and configuration reviews
• Knowledge of cloud environments such as Azure, AWS, and Oracle
• Familiarity with managing virtual systems and pentesting tools
• A relevant cybersecurity certification (e.g., CEH, CISSP, OSCP)
• Strong analytical skills to interpret assessment reports and design actionable dashboards
• Ability to manage external suppliers and collaborate with cross-functional teams