Engineer II - Vulnerability Detection

Overview

Engineer II - Vulnerability Detection for OT/IoT security. The role focuses on identifying, validating, and automating parts of a vulnerability content pipeline for industrial environments.

What you'll do

• Identify, evaluate, and onboard vulnerability data sources relevant to OT/IoT devices and vendors.
• Monitor threat intelligence and vulnerability disclosures to prioritize content.
• Handle and troubleshoot customer escalations to validate content quality and drive product improvements.
• Maintain a structured device inventory and prioritize expansion based on customer and market needs.
• Contribute to KPI development and baseline metric tracking for pipeline performance and coverage.
• Operationalize health checks and quality controls across the vulnerability content pipeline.
• Collaborate with security SMEs to develop detection content focused on adversary activity in industrial environments.

What you'll need

• 3–7 years of hands-on experience in OT/IoT security, vulnerability research, or related technical disciplines.
• Proficiency with Go (Golang) for backend/cloud service development.
• Search proficiency using OpenSearch/ElasticSearch with complex queries and aggregations.
• Ability to correlate data by stitching heterogeneous telemetry into unified asset records.
• Packet analysis tool experience such as Wireshark, Zeek, or Scapy, including custom dissectors/parsers for OT protocols.
• Working knowledge of OT/Purdue Model systems including SCADA, DCS, and HMI (and their security considerations).
• Python or Go required; additional languages are a plus.
• Working knowledge of ICS/OT protocols such as Modbus, DNP3, ENIP, and similar.

Details

• Location: Pune, India.