Primary responsibilities:

1. Carry security assessment on Embedded Product Using Threat Model, Threat & Risk Analysis and vulnerability analysis.
2. Bring up the Security Architecture and Design as per the Need of the project to mitigate/Remediate the threats and Get final Cybersecurity approval for Release.
3. Design and Develop the Secure Embedded software applications
4. Analyze and propose mitigation for Security scan results - SAST,DAST,SCA and FST requirements.

Qualification / Requirement:

- Bachelors/Masters degree in CS/E&C;/IS with Overall Working experience of 8+ Years in Embedded System with Cybersecurity
- Proven experience in Secure software design development with security practices.
- Robust understanding of security protocols, cryptography, and secure coding techniques.

Essential Requirements:

- Very strong technical knowledge on Secure Embedded system Design and Implementation in Bare Metal & Embedded Linux – Secure Boot, Serial, USB, Ethernet and IoT
- Hands experience with Programming Language C, C++ and Python
- Secure Design Patterns & Principles, Standards IEC62443, NIST 800 Standard OWSAP, CWE




- Working experience with Network Protocols, network Infrastructure and services in Embedded Linux- Firewalls, Router, Switches, VPN, HTTP, SSH,SFTP,FTP,TFTP,SNMP,DHCP,MQTT,MQTTS,NTP etc
- Cryptographic Concept - Storage of passwords, accounts, keys, Certificates use, Crypto Key Management, Key Generation and Key Usage

Desired Requirements :

- Sound Knowledge on the Network Security Protocols HTTPS, SSL,TLS
- Authentication and Authorization
- Gitlab Repository and Pipeline Concept
- Design and Development experience in FPGA, PLC, Cloud and IOT based secure systems
- Study and Propose best Security design Solution to meet the project needs
- Understand and Comply to customer proposed security Requirements and Standards
- Risk Assessment
- Security Scan tools Knowledge Polaris, Blackduck etc
- Ability to perceive the system knowledge and Analyse the Threat Surface and Vector of threat
- Proficient enough to Propose and Conceptualize the Security solution based on the Technology domain

📌 Cyber Security Engineer (Bengaluru)
🏢 Onward Technologies
📍 Bengaluru