Cyber Security Engineer

Overview

Contribute to improving the cybersecurity of grid automation products, embedded systems, and industrial solutions through security assessments, threat modelling, risk analysis, vulnerability management, and compliance activities, supporting product and system/solution certification aligned with IEC 62443 and the EU Cyber Resilience Act (CRA).

What you'll do

• Conduct cybersecurity assessments of products, embedded systems, software, and industrial solutions to identify security gaps, evaluate risks, and recommend mitigation measures.
• Perform threat modelling, attack-surface analysis, risk assessments, and threat mitigation planning throughout the product development lifecycle.
• Assess compliance with applicable IEC 62443 standards, including IEC 62443-3-3, IEC 62443-4-1, IEC 62443-4-2, and IEC 62443-3-2, and support compliance gap assessments and remediation plans.
• Support product and system/solution cybersecurity certification, including pre-assessments, evidence preparation, audit coordination, and closure of non-conformities.
• Evaluate product cybersecurity requirements under the EU Cyber Resilience Act (CRA), monitor regulatory developments, and support compliance documentation and readiness activities.
• Manage product vulnerabilities through identification, risk-based prioritization, remediation tracking, verification, and closure, including third-party component and SBOM reviews.
• Prepare cybersecurity assessment reports, threat registers, compliance matrices, risk summaries, and technical documentation, ensuring traceability of findings and mitigation activities.

What you'll need

• Degree in Computer Science, Cybersecurity, Electronics, Electrical Engineering, or a closely related discipline, with approximately 4 years of relevant experience in product cybersecurity, security assessment, embedded systems, or industrial cybersecurity.
• Hands-on experience in cybersecurity assessments, threat modelling, risk analysis, and mitigation planning.
• Working knowledge of the IEC 62443 series, particularly product and system cybersecurity requirements, and experience supporting compliance assessments.
• Knowledge of the EU Cyber Resilience Act (CRA), product cybersecurity obligations, and certification processes.
• Practical experience in vulnerability management, CVE/CVSS-based risk assessment, remediation tracking, and security verification.
• Ability to review security architectures, technical specifications, design documents, and security testing reports.
• Familiarity with SBOMs, software vulnerabilities, penetration testing, security scanning, and embedded or industrial communication technologies.

Nice to have

• Relevant cybersecurity certifications or training in IEC 62443, industrial cybersecurity, product security, or risk assessment.

Details

• Location: Bangalore, Karnataka, India (Electrification Business, Distribution Solutions Division).
• Work mode: Hybrid.
• Reports to: R&D Team Lead.