Cybersecurity Engineer

Apital is seeking an enthusiastic, self-motivated Cybersecurity Analyst who thrives in a fast-paced, safety-critical environment. The successful candidate will be supporting major rail transit infrastructure projects.

The Cybersecurity Analyst monitors and defends transit IT and OT environments, including SCADA systems, signaling networks, fare collection system and passenger information systems, from cyber threats and vulnerabilities.

• Develop secure architecture for rail OT and enterprise IT systems.
• Harden endpoints, control panels, and remote access interfaces.
• Implement secure communications for onboard and trackside systems including firewalls and security devices.
• Design and implement encryption, authentication, and integrity mechanisms for CBTC, PTC communication and other rail applications.
• Develop secure architecture for onboard train systems interacting with control centers via LTE, Wi-Fi, or fiber networks.
• Harden communication protocols used in train signaling (e.g., GSMR, WiFi 6E, 5G, and proprietary protocols).
• Collaborate with signal engineering teams to ensure cybersecurity in Automatic Train Control (ATC), fare collection system, central diagnostic and other rail systems.
• Assist with secure deployment of WiFi, CCTV, and fare collection systems.

• Experience in industrial control system security (e.g., PLC, RTU, SCADA).
• Familiarity with OT network segmentation and zero trust principles.
• Knowledge of NIST 80053, IEC 62443, or equivalent standards.

• Certifications: GICSP, CISSP, ISA/IEC 62443 Cybersecurity Expert.

401K, 401 matching, disability insurance, employee assistance program, flexible spending account, health insurance.