Overview
Cybersecurity Engineer focused on product cybersecurity, performing ongoing assessments and advising teams on compliance with cybersecurity standards and technical controls for web and embedded/connected systems.
What you'll do
- Conduct product cybersecurity reviews and assessments across the SDLC for compliance with standards and technical controls.
- Partner with engineering teams on threat modeling, threat/risk assessments, and security analyses to identify vulnerabilities and attack vectors.
- Provide guidance on cybersecurity principles, technologies, and risk management to engineering and stakeholders.
- Recommend secure design principles, software security controls, hardening strategies, and risk mitigation to reduce attack surface.
- Support investigation of cybersecurity defects, perform root cause analyses, and help implement corrective and preventive actions.
- Develop and deliver cybersecurity training and awareness programs for engineering and business stakeholders.
- Support vulnerability disclosure and remediation planning plus security incident response for product cybersecurity.
What you'll need
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- 8-10 years of experience in design, development, and testing of web-based, embedded, and/or connected systems.
- 4+ years of hands-on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
- Hands-on experience with threat modeling, attack surface analysis, vulnerability assessments, and security testing.
- Experience applying cybersecurity frameworks/standards including IEC 62443, NIST 800-53, NIST CSF, and ISO/IEC 27001 (or equivalent).
- Experience with secure product development processes and DevSecOps practices.
- Knowledge of cryptographic technologies including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
Nice to have
- Industrial sector experience in rail, transportation, mining, automotive, manufacturing, or critical infrastructure.
Details
- Location: Bengaluru, KA, India.
Read the full description and apply on the company’s own careers page.