Lead Engineer - Cybersecurity (Cloud &IOT)

Overview

Lead the security architecture for Eaton's cloud-based IoT products as part of a global team driving a 'Security by Design' philosophy.

What you'll do

• Define and maintain the end-to-end security architecture for cloud-based IoT products, including devices, gateways, cloud services, data flows, and multiple cloud APIs.
• Establish security requirements and architecture guardrails for authentication, authorization, API security, encryption, secrets management, tenant isolation, logging, and monitoring.
• Lead threat modeling and security design reviews for major releases, minor upgrades, and hot fixes; identify risks early and ensure approved mitigations are incorporated before release.
• Partner with product, cloud, DevOps, and engineering teams to embed security controls in the CI/CD lifecycle, including GitHub Advanced Security for secure coding and Black Duck for third-party component governance.
• Own security architecture decisions, risk acceptance inputs, remediation guidance, and release-security readiness; collaborate with the penetration-testing resource while maintaining clear accountability for architecture and design assurance.
• Create and maintain security architecture artefacts, including trust-boundary diagrams, data-flow diagrams, security patterns, control mappings, and architecture decision records.
• Define security acceptance criteria and review evidence for each release, ensuring critical architecture risks and tool findings are resolved, formally accepted, or tracked with clear remediation plans.
• Work with cloud operations and incident-response teams to design secure logging, monitoring, alerting, backup, recovery, and breach-containment capabilities for the IoT platform.
• Provide technical leadership and mentoring to architects and engineering teams, evaluate emerging threats and cloud security capabilities, and drive continuous improvement of reusable security standards and patterns.
• Provide hands-on guidance to product teams implementing complex cybersecurity features and requirements in line with cybersecurity standards.
• Define security architecture and assurance requirements for AI-enabled features and AI/ML services.
• Integrate and govern GitHub Copilot and other approved AI-assisted engineering capabilities for security reviews, secure-code analysis, threat modeling, vulnerability triage, and remediation guidance, with human validation and guardrails for confidentiality, intellectual property, and responsible use.

What you'll need

• Bachelor's or master's degree in Computer Science, Electronics Engineering, or Electrical Engineering.
• Overall 8 to 12 years of industry experience.
• 5+ years of relevant experience in product cybersecurity.
• Strong hands-on knowledge of cloud and IoT security architecture, including device-to-cloud trust, secure onboarding, identity and access management, network segmentation, data protection, key/certificate management, and zero-trust principles.
• Demonstrated expertise in API security for REST and event-driven interfaces, including OAuth 2.0, OpenID Connect, JWT, mutual TLS, API gateways, rate limiting, input validation, and OWASP API Security risks.
• Practical experience with threat modeling and security risk assessment using recognized methods such as STRIDE, attack trees, and misuse cases, with the ability to translate findings into implementable architecture requirements.
• Hands-on experience using Threat Modeler tool for cloud projects.
• Experience integrating and governing DevSecOps controls in CI/CD pipelines, including GitHub Advanced Security capabilities such as code scanning, secret scanning, and dependency review, plus Black Duck software-composition analysis and open-source risk management.
• Knowledge of secure cloud operations and release governance, including vulnerability management, security logging and monitoring, incident-response readiness, remediation prioritization, and security approval for frequent releases, hot fixes, and minor upgrades.
• Ability to design and review security controls for major cloud platforms and services, including containers, Kubernetes, serverless workloads, message brokers, databases, object storage, and infrastructure as code.
• Strong understanding of security logging, cloud-native monitoring, SIEM integration, incident response, backup and recovery, and the design of resilient and observable IoT services.
• Working knowledge of cybersecurity standards and frameworks such as NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, IEC 62443, and secure product-development practices, with the ability to map requirements to technical controls.
• Ability to produce clear security architecture documentation, communicate risk-based decisions to technical and business stakeholders, mentor engineering teams, and influence design outcomes across multiple product releases.
• Experience with AI security and security for AI across the AI/ML lifecycle, including threat modeling of AI systems.
• Hands-on experience configuring and using GitHub Copilot for AI-assisted security reviews, code and design analysis, secure-coding recommendations, vulnerability triage, and remediation, with prompt governance, approved-use controls, and human-in-the-loop verification.
• Ability to apply approved AI tools across the secure product-development lifecycle to identify security requirements, review architecture and code, generate and validate security test cases, prioritize vulnerabilities, and improve remediation guidance, while ensuring human oversight, data protection, accuracy, and responsible AI use.
• Ability to work in and with diverse, multi-cultural, and geographically dispersed teams.
• Ability to collaborate across multi-disciplinary teams (legal, IT, product management, project management).
• Ability to present to various levels of engineering and business leadership globally.
• Excellent documentation skills.
• Ability to be a technical mentor to other members of the team and beyond as needed.

Details

• Location: Hadapsar, Pune, Maharashtra, India.