Internship 6 Months - Product Cybersecurity - Cyber Attack Chain (F/M)

Req ID : 531634

At Alstom, we build what millions of people depend on every day: rail transportation systems that cannot afford to fail. We are more than 85,000 colleagues worldwide, creating the industry's broadest portfolio of high-speed trains, metros, trams, maintenance services, and integrated systems.

More Than a Job: A Mission

We are looking for a passionate intern eager to contribute to one of the most strategic cybersecurity challenges facing modern railway systems: understanding how multiple vulnerabilities can be combined into realistic attack chains that threaten critical transportation infrastructures.

You will join Alstom's Product Cybersecurity team and work on the development of practical methodologies to identify, prioritize, and assess multi-step cyberattack scenarios within complex railway architectures. Your work will directly support the evolution of cybersecurity risk assessment practices applied across connected and safety-critical railway systems worldwide.

Your Role, Your Impact

- Review and assess existing methodologies related to attack path modeling, threat analysis, and cybersecurity risk assessment.

- Analyze the data sources, system information, and cybersecurity artifacts currently available within Alstom projects and risk management activities.

- Design a practical and scalable methodology for identifying plausible cyber attack chains across complex railway architectures.

- Develop mechanisms to evaluate the feasibility, criticality, likelihood, and potential impact of identified attack scenarios.

- Validate the proposed approach through representative railway cybersecurity use cases and real-world architecture scenarios.

- Define and apply appropriate metrics to measure the effectiveness, scalability, and operational value of the methodology.

- Produce recommendations for integrating attack chain analysis into Alstom's cybersecurity risk management processes.

- Contribute to the continuous improvement of cybersecurity practices that support the protection of connected railway solutions.

You'll work with highly skilled and committed teams solving complex cybersecurity challenges that shape the future of mobility, ensuring seamless integration between risk management, cybersecurity engineering, and operational safety.

What You Bring

- Currently pursuing a Master's degree or Engineering degree in Cybersecurity, Computer Science, Software Engineering, Industrial Systems, or a related field.

- Strong interest in cybersecurity risk assessment, threat analysis, and attack modeling.

- Understanding of complex architectures, industrial systems, or embedded systems.

- Analytical mindset and ability to investigate and structure complex technical problems.

- Curiosity for applied cybersecurity research and emerging security methodologies.

- Ability to work autonomously while collaborating effectively with multidisciplinary and international teams.

- Strong technical writing and communication skills.

- Fluent English, both written and spoken.

Knowledge of industrial cybersecurity, embedded systems security, MITRE ATT&CK, cyber risk assessment methodologies, or critical infrastructure protection would be a valuable asset.

How Success Is Measured

- Quality, relevance, and practicality of the attack chain identification methodology developed.

- Ability to identify realistic and actionable attack scenarios within representative railway architectures.

- Effectiveness of the proposed metrics and evaluation mechanisms.

- Quality of demonstrations and validation activities performed on real-world use cases.

- Contribution to the improvement of cybersecurity risk management practices within the organization.

- Quality of documentation, recommendations, and final deliverables.

Alstom, A Great Place to Grow

- Contribute to a high-impact cybersecurity topic directly related to the protection of critical transportation infrastructures.

- Develop expertise in attack path analysis, threat modeling, and cyber risk management methodologies.

- Gain hands-on experience with complex railway architectures and industrial cybersecurity environments.

- Collaborate with experienced cybersecurity professionals and international stakeholders.

- Participate in the development of innovative approaches that can be industrialized and deployed at scale.

- Help shape the future of cybersecurity practices within a global leader in sustainable mobility.

Duration: 6 months
Start Date: ideally from january 2027 (adaptable according to academic constraints).

You do not need to be passionate about the railway industry to thrive with us. We guarantee that, when you travel on one of our trains with your family or friends, you will be proud to have contributed to it.

As an international company, we ensure equal opportunities and value diversity across each of the 63 countries in which we operate. We are committed to providing an inclusive work environment where everyone can thrive, be respected, and fully develop their potential.