Background
Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.
Air Mobility Solutions provides leading edge airspace control and security solutions for the commercial and defence sectors.
Thales's advanced LORADS air traffic management system ensures the safety of operators and passengers at a time when soaring growth in air traffic poses a range of complex technical challenges.
Technologies supplied by the Air Mobility Solutions global centre of excellence, based in Singapore, are currently deployed in Singapore and across Asia and the Pacific region.
Thales Australia's air traffic control systems are in use in over 50 countries including Australia, Mexico, South Africa, China, Singapore and Thailand.
Purpose:
The Cyber Security Engineering position is within Airspace Mobility Solutions in Singapore to contribute, but not limited to the LORADS and Topsky-ATC HE projects managed and supported from Singapore.
The position includes the following main responsibilities:
- To undertake security engineering and architecture activities as per budget and aligned with contract and strategy set by the System Cyber Security Engineering Lead.
- To define security solution and associated estimates for specific work packages and bids activities, for example in relation to Contract Change Proposal and Engineering Change Requests/Proposals.
- To provide technical leadership on security solution for the LORADS System and the impact on suppliers’ sub-systems and security components (e.g. other business lines).
- To define security solutions cooperatively with supplier solution teams, engineers and the cyber security design authority.
- To develop security engineering artefacts such as the statement of applicability to the targeted version of the applicable security standards, and other applicable CDRLs as directed by the lead cyber security engineer.
- To lead the vulnerability management service activities to Asian customers.
- To lead security audit and cyber health check service activities to Asian customers.
- To interface with other business lines (e.g. CDS) for the delivery of other cyber security services to Asian customers.
- Contribute to the security risk management by identifying and characterising security risk to the customer context.
- To contribute to customer meetings in relation to the cyber security tasks that you are implementing.
- To contribute to other security tasks from the AMS Business Line like for instance incident response and crisis exercises.
- To support other project or service initiatives when required.
KEY ACTIVITIES AND RESPONSIBILITIES
As the Cyber Security Engineer, you are accountable for:
- Lead, tailor, and support the Security strategy as per Engineering Plans.
- Plan, execute and manage the delivery and the Customer approval of Security deliverables;
- Plan, execute and manage the delivery of the security component with appropriate artefacts.
- Manage the technical risks relevant to Security activities to contribute to program risk management.
- Lead Security Architecture Design as per project needs.
- Lead the vulnerability management service activities to Asian customers.
- Lead security audit and cyber health check service activities to Asian customers.
- Contribute to the response of cyber incident and crisis events.
- Select, specify, and deploy methodologies (including metrics), tools/platforms necessary for Security Engineering activities in line with company policies.
- Manage and prioritize defects correction and evolutions in accordance with the project sprint strategy.
- Support Bids and Engineering Change Proposal evaluation;
- Providing collaborative support to the other members of the Project team.
- Support and contribute to the definition of the Security solution and Policies for the Products (Topsky-HE, Topsky-One, LORADS ATC).
Interactions:
- Works closely with the head Cyber Engineering Manager and the Cyber System team in country and Australia, the cyber sub-system team and solution engineering teams from the various sub-systems, including the legacy LORADS ATC and the future Topsky-One.
- Works closely with Cyber Head of Discipline, Security Authority and Solution Architects.
- Works with Subcontractors and suppliers to ensure they are aligned with the Security Program and comply with the defined security baseline.
- To establish trusted relationship with the Customers and Subcontractors (including CDS).
- Strong internal and external stakeholder management skills.
Challenges:
- Complex stakeholder community with different requirements and cultural approaches to the Delivery Process.
- High level of Customer and Senior Thales Management scrutiny and audit.
- Re-establishing a robust and rigorous discipline of weekly/monthly reporting and tracking of Project issues (cost/risk/schedule etc).
- Working in a multicultural and multisite environment.
- This position requires the capacity to understand and handle resistance to change, to engage cross functional, diverse stakeholders.
KEY KNOWLEDGE AND EXPERIENCE
To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:
- Experience in the life cycle of software/system development including processes and responsibilities at each stage of the cycle.
- Delivery of engineering/management services to tight timelines.
- Understanding of Security System Engineering processes and FBL/ABL/PBL management
- Working with a multi-skilled team of engineers: 2+ years
- Knowledge of Security Standards (NIST, ISO27001, Singapore security standards)
- Understanding of System accreditation and impact on project streams (sub-systems).
- Proven problem identification and analysis skills and system requirements analysis skills.
- Selecting, specifying and deploying methodologies including metrics, tools/platforms (e.g. DOORS).
- Producing appropriate artefacts leading to Customer acceptance and final accreditation.
- Contributing to Cost Models.
- Contributor to Risks & Opportunity management.
- Contribution to the management of subcontractors.
- Providing coaching/mentoring of less experienced staff.
- Challenge status-quo by being creative and innovative.
- Capability to delegate and supervise work performance.
- Excellent written and oral communications skills.
- Ability to manage Work Packages.
