Cybersecurity Specialist – Railway Systems

Job Description:

Parsons is seeking a Railway Cybersecurity Specialist to join the Program Management Consultancy (PMC) team for the Dubai Metro Blue Line project. This role focuses on safeguarding critical railway systems, including IT, OT, and Communications-Based Train Control (CBTC) systems, ensuring compliance with global and regional railway cybersecurity standards. The ideal candidate will have extensive experience in railway cybersecurity, particularly in the protection of CBTC, signaling, SCADA, and other operational technologies critical to metro operations.

What You'll Be Doing:

• Parsons is seeking a Railway Cybersecurity Specialist to join the Program Management Consultancy (PMC) team for the Dubai Metro Blue Line project. This role focuses on safeguarding critical railway systems, including IT, OT, and Communications-Based Train Control (CBTC) systems, ensuring compliance with global and regional railway cybersecurity standards. The ideal candidate will have extensive experience in railway cybersecurity, particularly in the protection of CBTC, signaling, SCADA, and other operational technologies critical to metro operations.

  SPECIFIC RESPONSIBILITIES:

• Cybersecurity Governance and Strategy:

  • Develop and implement a comprehensive cybersecurity strategy tailored to the railway environment, ensuring alignment with Dubai’s Cybersecurity Law, and global railway standards.
  • Collaborate with design, engineering, and operational teams to embed cybersecurity measures throughout the project lifecycle.

• Railway Cybersecurity Risk Management:

  • Conduct risk assessments for railway-specific IT and OT systems, identifying vulnerabilities in CBTC, signaling, SCADA, and traction power systems.
  • Develop and implement risk mitigation plans aligned with standards such as IEC 62443, TS 50701, and NIST.

• Standards Compliance and Certification:

  • Ensure compliance with railway cybersecurity standards, including:
    • IEC 62443: Industrial communication networks and system security for OT.
    • TS 50701: Cybersecurity for railway applications.
    • ISO 27001: Information security management systems.
    • CENELEC EN 50126/50128/50129: Safety assurance and reliability for railway applications.
  • Oversee cybersecurity certification for CBTC and associated systems in collaboration with system suppliers and independent safety assessors (ISAs).

• Railway System Security:

  • Ensure robust cybersecurity measures are in place for signaling systems, rolling stock, and train-to-ground communications.
  • Work with contractors and suppliers to secure GoA 4 (unattended train operation) systems and ensure their resilience against cyber threats.
  • Monitor and secure the integration of railway-specific IoT devices and smart systems into the metro network.

• Incident Response and Recovery:

  • Develop and test incident response plans specific to railway systems, ensuring minimal disruption to operations.
  • Coordinate post-incident analysis and recommend improvements to enhance resilience.

• Stakeholder Collaboration:

  • Act as the primary cybersecurity advisor for Parsons’ PMC team, liaising with the RTA, contractors, and technology suppliers.
  • Provide cybersecurity awareness training for stakeholders, emphasizing railway system vulnerabilities and countermeasures.

• Cybersecurity Monitoring and Maintenance:

  • Implement and manage railway-specific intrusion detection and prevention systems (IDPS) for CBTC and SCADA networks.
  • Ensure continuous monitoring and logging of critical systems, leveraging SIEM solutions for proactive threat detection.

What Required Skills You'll Bring:

• In-depth understanding of IEC 62443, TS 50701, and CENELEC standards (EN 50126, EN 50128, EN 50129).
• Strong knowledge of cybersecurity for CBTC, SCADA, and industrial control systems (ICS).
• Experience with vulnerability assessment tools, penetration testing, and threat modeling for railway environments.
• Exceptional problem-solving and analytical abilities.
• Excellent communication and ability to convey complex cybersecurity concepts to non-technical stakeholders.
• Collaborative team player with experience managing diverse, multi-disciplinary teams

Minimum Clearance Required to Start:

Not Applicable/None

Parsons is an equal opportunity employer committed to diversity in the workplace. Minority/Female/Disabled/Protected Veteran.