- Who are you?
My Name is Alina Matyukhina. I am Head of Cybersecurity for Siemens Smart Infrastructure, Building Automation, responsible for ensuring that products for smart buildings meet the adequate cybersecurity level while supporting the needs of users and stakeholders. Previously, I worked as a cybersecurity researcher at the Canadian Institute for Cybersecurity and the Swiss Federal Institute of Technology Lausanne. I hold a PhD in computer science for the work in software security and data privacy. To improve digital safety and security in Switzerland, I am serving as a Chair of the “Smart Cities & Infrastructure” working group at the Swiss Cyber Institute and as a cybersecurity expert for digitalswitzerland. My work in cyber security was featured in major tech and business publications such as Forbes, and World Economic Forum, as well as the prestigious academic journals IEEE and ACM.
- Why are you passionate about IT?
Personally, it is essential to work in a domain that I feel has a good impact on our society. Back in the day, closed doors offered enough security against outside threats. But with growing digitalization, and the adoption of the Internet of Things (IoT), this physical protection is not enough anymore. Cybersecurity is more crucial than ever!
My journey in cybersecurity started in 2015 at EPFL (the Swiss Federal Institute of Technology Lausanne), where I discovered that my research in math, and number theory, can be applied to solve security problems with encryption algorithms. Making our world a safer place has always been a driving force in my life as a cybersecurity professional.
- What tasks do you do every day? What does a day in your shoes look like?
I am working with the core cybersecurity team on the definition of the cybersecurity vision and strategy of our building automation products.
Together with the product management team, I ensure that our products, solutions, or services have adequate built-in cybersecurity. I am responsible for designing and implementing processes, plans, and tools that safeguard our products. Every new generation of developed product is secure-by-design: We implement cybersecurity in the initial design of the products. Together with security experts, I perform threat and risk assessments throughout the lifecycle of products to identify and mitigate potential risks. Those assessments start early in the product development process and repeat for every significant update. Before releasing a new product, we ask independent third-party organizations to test our products for potential vulnerabilities. I am supporting cybersecurity certification activities from pre-assessment to the audit by the independent certification body. Recently, our organization and products were certified on IEC62443 – one of the most well-known industrial security standards.
People are at the heart of a successful and effective cybersecurity strategy. At Siemens, we’re investing continuously in training and awareness. I help to develop cybersecurity training for our internal employees, such as line managers, product managers, architects, and others. I believe it will help safeguard organizations against cyberattacks.
Furthermore, as an industry thought leader, I speak at cybersecurity conferences and events, where I educate the Swiss public and the private sector on how to protect against cyberattacks. To facilitate collaboration between critical infrastructure manufacturers, operators, and owners, I am chairing the activity of the “Smart Cities & Infrastructure” working group of the Swiss Cyber Institute, where we gather experts from industry, government and academia to improve industrial cybersecurity. I am also an expert on cybersecurity at digitalswitzerland, where I contribute to a cyber-resilient Switzerland. I share my knowledge and experience with the belief that it is a necessary part to raise cybersecurity awareness and an integral part of giving back to the community and the country. For my work in awareness and education of Swiss companies and the public, I was named Digital Shaper in the category “Cybersecurity guards” by Bilanz and „10 Women in Tech in Switzerland to Follow in 2022“.
- A look back: What tips/advice/wishes would you give your 14-year-old-self regarding career choices?
The cybersecurity field is a new, growing domain where there are a large number of opportunities for the young generation. We have too many threats but only a few cybersecurity experts! I see the urgent need to boost the number of specialists.
And this domain is not limited by your gender, race, or background. Keep going, even if it seems a bit hard or impossible. Do not be afraid to be the only woman in the room. Build expertise, share information, and believe in yourself!
- A look back: Which tasks did you like best during your studies?
I have always been passionate about teaching and sharing my knowledge with students. When I was a student, I was a mentor and supervisor to students who were new to the faculty of Computer Science. Today at Siemens, I have the opportunity to share my expertise with students through a series of education events organized by my company – «Computer Science Tech Meetup» and «Student Digital Talk». I have a chance to talk about my work in the cybersecurity industry and inspire students to consider IT and cybersecurity careers. Overall, the universities provide an excellent theoretical background for students, but I still see a lack of practical knowledge. A knowledge closer to real-world needs. At Siemens, together with my colleagues, we collaborate with different universities on research projects for students so that they can get hands-on experience.
Interview und Redaktion: Zoé Jeanneret