Product Security Analyst

Overview

Product Cyber-security Analyst responsible for analysing controllers, systems and cloud architectures for cyber security requirements, testing cyber security levels and recommending mitigation plans during tendering, project execution and product development, and for secure design of cloud and customer-facing dashboards.

What you'll do

• Involve in reviews, suggest architectural changes, and conduct tests to ensure systems, controllers and cloud platforms meet cyber security requirements.
• Collaborate with system and subsystem engineers to develop top level software requirements, architecture and designs.
• Facilitate decisions and bring teams together to design and document software architecture, modularity and future-proofing.
• Involve in proofs-of-concept to prove out strategy and manage development and product risks.
• Champion testing and validation of critical architecture and interface requirements for real time controls system software and application tools.
• Own production of technical documentation for software architecture, design and verification plans.
• Contribute to multi-generation product and tool planning.
• Ensure all software developed is compliant with cyber security requirements.
• Work with multiple teams in different locations to deliver cyber secure software to meet customer requirements.

What you'll need

• Bachelor's or Master's degree in computer science or relevant engineering, or equivalent knowledge/experience, with 5+ years of experience.
• Significant software development experience for cloud based systems.
• Experience in cyber security for controllers and systems in the OT space and in cloud architectures.
• Familiar with penetration testing for controllers, systems and web software, CAPEC, and ethical hacking.
• Experience with cyber security/network tools such as Wireshark, Nessus, Burp Suite, etc.
• Design and development skills using latest Java/Java EE technologies and open source frameworks including Spring, JSF, Hibernate, OpenJPA and EclipseLink.
• Experienced in the different phases of the Software Development Life Cycle (SDLC), including design, implementation and testing.
• Extensively worked on web technologies such as JavaScript, jQuery, AJAX, JSON, AngularJS, Angular 6, NodeJS, Spring, Hibernate, Spring Boot, MVC, RESTful Web Services, Flux and SOAP.
• Cloud platform experience: AWS.
• Database experience: RDBMS (MySQL) and NoSQL databases.
• Software components: MS Visual Studio, MS Office, MS Visio, SVN, GitHub; Linux and Windows OS.
• Extensive experience with software configuration management tools such as Git.
• Hands-on experience with enterprise application and web application servers such as Tomcat and WLP.

Nice to have

• Strong software development skills in C++, C# and Python.
• Familiar with ISA-624443 and NIST 800 standards.
• Experience in software development including system design, requirement gathering, software development and verification, build and release, and documentation.
• Experience in build automation, continuous integration, configuration management, verification and deployment of software.
• Experience in database design and version-control repository-based applications.
• Demonstrated track record of success with excellent technical written and verbal communication skills.
• Proven project management experience.
• Experience in highly demanding computational power software, HPC and cloud-based engineering solutions.
• Leadership experience in a research and development environment.

Details

• Location: Chennai.
• Relocation assistance provided.