Cyber Security Engineer

Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.

Cyber Security Engineer

This position is hybrid model in our São Bernardo do Campo unit.

Position Summary

The Cyber Security Specialist is responsible for maintaining and enhancing the security of software systems by deploying security patches and conducting system installations and regression tests. This role involves validating key cyber security features, including antivirus, integrity, certificate management, roles and flow matrix, firewall configurations, and LDAP authentication. The specialist will automate verification tests and regression test campaigns, document deployment procedures, and contribute to vulnerability analysis. In addition, they will support and train software and system teams on the use and deployment of cyber features, manage vulnerabilities and risks in collaboration with customers, and assist customers in developing and maintaining Operational Technology security practices. This includes undertaking asset discovery activities, providing guidance within the threat environment, and ensuring compliance with relevant security standards and procedures.

Key Areas of Responsibility

• Define network & cybersecurity architectures for radar systems (security-by-design from design phase);
• Design secure LAN/WAN/VLAN/DMZ/VPN infrastructures and communication flows (segmentation, access control, hardening);
• Produce/maintain architecture diagrams & technical documentation aligned with project standards;
• Deploy and administer perimeter security solutions (e.g., Stormshield UTM) and manage/firewall policy enforcement;
• Configure/administer switches, routers, VPN gateways, security appliances and troubleshoot network issues;
• Validate cybersecurity functions: AV, integrity, certificates, and verify authentication/authorization(e.g., LDAP, roles/access matrices) ;
• Support secure installation/upgrades for Linux-based radar hosting; conduct integration & FAT/SAT readiness;
• Execute regression testing & system validation (Robot Framework), support test automation and test campaigns;
• Verify compliance with cybersecurity standards and customer/regulatory requirements;
• Perform risk assessments, technical reviews, and hardening activities;
• Analyze logs for troubleshooting/anomaly resolution; ensure traceability (requirements → tests → results) ;
• Manage vulnerabilities/risks (tracking findings, support RCA, customer follow-up);
• Support training/enablement for SW/system/customer teams; assist OT practices (asset discovery, threat-informed guidance, compliance);

Maintain GitLab Pipelines to ensure correct Build of the Solution (quality/security gates).

Minimum Qualifications

• Bachelor’s degree in networks, Telecommunications, Computer Science, Cybersecurity, or a related field or any other related field in university [with a speciality in Cryptology, Systems or Cybersecurity];
• English: Advanced;
• Linux kernel high-level knowledge;
• Experience in the design, development, and/or security testing of cybersecurity-oriented products such as IP encrypts or firewalls;
• Deploy and integrate perimeter security solutions;
• Install, configure, and administer Stormshield UTM firewalls;
• Configure network devices including switches, routers, VPNs, and security appliances;
• Specific expertise on a hardware or software security topic (e.g. intrusion detection (HIDS), Secure Boot, antivirus, integrity check (Aide), syslog management, certificates management, LDAP);
• Packaging, deployment and/or troubleshooting of Linux in the context of embedded systems;
• Scripting and configuration (python, bash, yml, ansible, robot framework);
• System Engineering tools: Jira, Gitlab (With Pipelines), Artifactory.

If you’re excited about working with Thales, but not meeting the requirements for this position, we encourage you to join our Talent Community!

What We Offer

Thales provides an extensive benefits program for all full-time employees working 30 or more hours per week and their eligible dependents, including the following:

• Elective Health and Dental plans;
• Retirement Savings Plan with a company contribution and a match;
• Company paid holidays, vacation days, and paid sick leave;
• Company provided Life Insurance.

Why Join Us?

Say HI and learn more about working at Thales click here.

#LI-Hybrid

Thales champions inclusion and we believe diversity strengthens the fabric of our culture.

Thales is an Equal Opportunity Employer, all qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, age, or any other characteristic protected by law.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!