Senior Cyber Security Engineer

Overview

Senior Cyber Security Engineer in the Electrification Business, Distribution Solutions Division, improving the cybersecurity of grid automation products, embedded systems, and industrial solutions. Reports to the R&D Team Lead.

What you'll do

• Conduct cybersecurity assessments of products, embedded systems, software, and industrial solutions to identify security gaps, evaluate risks, and recommend mitigation measures.
• Perform threat modelling, attack-surface analysis, risk assessments, and threat mitigation planning throughout the product development lifecycle.
• Assess compliance with applicable IEC 62443 standards, including IEC 62443-3-3, IEC 62443-4-1, IEC 62443-4-2, and IEC 62443-3-2, and support compliance gap assessments and remediation plans.
• Support product and system/solution cybersecurity certification, including pre-assessments, evidence preparation, audit coordination, and closure of non-conformities.
• Evaluate product cybersecurity requirements under the EU Cyber Resilience Act (CRA), monitor regulatory developments, and support compliance documentation and readiness activities.
• Manage product vulnerabilities through identification, risk-based prioritization, remediation tracking, verification, and closure, including third-party component and SBOM reviews.
• Prepare cybersecurity assessment reports, threat registers, compliance matrices, risk summaries, and technical documentation, ensuring traceability of findings and mitigation activities.

What you'll need

• Degree in Computer Science, Cybersecurity, Electronics, Electrical Engineering, or a closely related discipline.
• Approximately 8 years of relevant experience in product cybersecurity, security assessment, embedded systems, or industrial cybersecurity.
• Experience in cybersecurity assessments, threat modelling, risk analysis, and mitigation planning.
• Knowledge of the IEC 62443 series, particularly product and system cybersecurity requirements, and experience supporting compliance assessments.
• Understanding of the EU Cyber Resilience Act (CRA), product cybersecurity obligations, and certification processes.
• Practical experience in vulnerability management, CVE/CVSS-based risk assessment, remediation tracking, and security verification.
• Ability to review security architectures, technical specifications, design documents, and security testing reports.
• Experience with SBOMs, software vulnerabilities, penetration testing, security scanning, and embedded or industrial communication technologies.

Nice to have

• Relevant cybersecurity certifications or training in IEC 62443, industrial cybersecurity, product security, or risk assessment.

Details

• Location: Bangalore, Karnataka, India.
• Work mode: Hybrid.