1 day ago
São Bernardo do Campo, BrazilSenior
Responsibilities
- Define network and cybersecurity architectures for radar systems using security-by-design principles.
- Design secure LAN, WAN, VLAN, DMZ, and VPN infrastructures, including segmentation, access control, and hardening.
- Produce and maintain architecture diagrams and technical documentation.
- Deploy and administer perimeter security solutions, including Stormshield UTM firewalls, and enforce firewall policies.
- Configure and troubleshoot switches, routers, VPN gateways, and security appliances.
- Validate antivirus, integrity, certificate, authentication, authorization, and access-control functions.
- Support secure Linux-based radar hosting installations and upgrades, including integration and FAT/SAT readiness.
- Execute regression testing and system validation, support test automation, and maintain test campaigns.
- Perform risk assessments, technical reviews, hardening, vulnerability tracking, root-cause analysis support, and customer follow-up.
- Analyze logs, verify cybersecurity compliance, maintain traceability from requirements to test results, and support OT asset discovery and threat-informed guidance.
- Support training and enablement for software, system, and customer teams.
- Maintain GitLab Pipelines and their quality and security gates.
Requirements
- Bachelor’s degree in networks, telecommunications, computer science, cybersecurity, or a related field, including related university specializations in cryptology, systems, or cybersecurity.
- Advanced English proficiency.
- High-level knowledge of the Linux kernel.
- Experience designing, developing, or security-testing cybersecurity-oriented products such as IP encryptors or firewalls.
- Experience deploying and integrating perimeter security solutions and administering Stormshield UTM firewalls.
- Ability to configure network devices including switches, routers, VPNs, and security appliances.
- Expertise in a hardware or software security area such as HIDS, Secure Boot, antivirus, Aide integrity checking, syslog management, certificate management, or LDAP.
- Experience packaging, deploying, or troubleshooting Linux in embedded-systems contexts.
- Experience with Python, Bash, YAML, Ansible, and Robot Framework for scripting and configuration.
- Familiarity with Jira, GitLab Pipelines, and Artifactory.
Benefits
- Hybrid work model in the São Bernardo do Campo unit.
- Elective health and dental plans for eligible full-time employees and dependents.
- Retirement savings plan with company contribution and matching.
- Company-paid holidays, vacation days, and paid sick leave.
- Company-provided life insurance.
- Benefits apply to full-time employees working 30 or more hours per week and eligible dependents.
About Thales
Thales designs and sells defense, aerospace, space, and digital identity/cybersecurity systems to governments, armed forces, infrastructure operators, and enterprises. Its portfolio spans avionics, radars and sensors, satellites, air traffic management, secure communications, and cybersecurity and identity solutions (bolstered by the 2019 Gemalto acquisition). Headquartered in Meudon, France, Thales is publicly traded on Euronext Paris (HO) and reported €20.6 billion in sales in 2024.