MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India.

Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Job Title: Cybersecurity Engineer / Product Security Engineer

Location: Bengaluru

Employment Type: Full-time

This role is focused on Product Cybersecurity Engineering, including threat modeling, security architecture reviews, embedded/IoT security, secure product design, and cybersecurity compliance.

During the screening, please look for below.

- 4 -7 years of hands-on experience with cybersecurity engineering, threat modelling, security architecture/design reviews, and security risk assessments?
- Hands-on experience applying cybersecurity standards such as IEC 62443 and/or NIST 800-53 in product development environments?
- Experience with embedded systems security, IoT security, or connected device security?
- Worked in a product-based engineering, industrial, manufacturing, automotive, rail, mining, or similar technology organization?
- Advised or partnered with product development teams to identify cybersecurity risks and implement security controls such as secure boot, cryptography, PKI, key management, or system hardening?

Candidates whose experience is primarily in IT Security, SOC, Information Security, Network Security, Data Security, Governance/Risk/Compliance (GRC), or Penetration Testing may not be a suitable match for this position. Kindly request you perform basic checks before sending the profiles on our way.

6+ years overall experience, with at least 4 years of hands-on experience in Product/Application Security, Security Engineering, Security Architecture, Risk Assessment, or Risk Management.

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Electronics, or a related technical field.

Role Overview

We are looking for experienced Cybersecurity / Product Security Engineers to support the design, development, assessment,



and testing of secure web-based, embedded, and connected products/systems.

The ideal candidate should have strong hands-on experience in security risk assessments, threat modeling, security architecture, vulnerability assessment, security testing, and secure product development. Experience working with industrial, automotive, rail, transportation, manufacturing, mining, or other critical-infrastructure environments will be highly preferred.

Key Responsibilities

- Perform security risk assessments for products, applications, embedded systems, and connected systems.
- Conduct Threat Modeling, Threat & Risk Assessments (TRA), Security Design Reviews, and Attack Surface Analysis.
- Identify security vulnerabilities, threats, attack vectors, and associated risks.
- Define and recommend appropriate security controls and mitigation strategies.
- Perform or support vulnerability assessments and security testing.
- Review product and application architectures from a cybersecurity perspective.
- Support implementation of Secure Product Development / Secure Software Development Lifecycle (SSDLC) practices.
- Collaborate with engineering teams to integrate security requirements throughout the product development lifecycle.
- Support DevSecOps practices and security integration into development and CI/CD processes.
- Evaluate products against applicable cybersecurity standards, frameworks, and regulations.
- Develop and maintain security requirements, risk documentation, threat models, and security assessment reports.
- Provide technical guidance to engineering and product teams on cybersecurity improvements.
- Work closely with Engineering, Product Management, Customers, Suppliers, and Leadership teams.
- Influence technical decisions and drive improvements in cybersecurity maturity across global teams.
- Stay updated on emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices.

Mandatory Technical Skills

Candidates should have hands-on experience in several of the following areas:

- Threat Modeling
- Security Risk Assessment
- Threat & Risk Assessment (TRA)
- Security Architecture
- Security Design Review




- Attack Surface Analysis
- Vulnerability Assessment
- Security Testing
- Application / Product Security
- Secure Product Development
- DevSecOps
- Cybersecurity requirements and risk management

Cybersecurity Frameworks & Standards

Strong knowledge of one or more of the following:

- IEC 62443
- NIST SP 800-53
- NIST Cybersecurity Framework (CSF)
- ISO/IEC 27001
- Other equivalent cybersecurity frameworks, regulations, and industry standards

Security Architecture & Cryptography

Hands-on knowledge of security architecture and cryptographic technologies, including:

- PKI (Public Key Infrastructure)
- Secure Boot
- Key Management
- Certificate Lifecycle Management
- Secure Communications
- Cryptographic technologies and security mechanisms

Preferred Industry Experience

Experience in any of the following industries will be an advantage:

- Rail / Transportation
- Automotive
- Industrial Automation
- Manufacturing
- Mining
- Critical Infrastructure
- Embedded / Connected Products

Behavioral & Professional Skills

- Strong analytical and problem-solving skills.
- Ability to work independently and manage multiple priorities.
- Excellent communication and presentation skills.
- Solid stakeholder management and collaboration skills.
- Ability to work effectively in a global, matrixed organization.
- Ability to influence technical decisions and communicate cybersecurity risks to technical and non-technical stakeholders.
- Strong collaboration with engineering, product, customers, suppliers, and leadership teams.
- Demonstrated commitment to continuous improvement and operational excellence.

Strong understanding of evolving cybersecurity threats, technologies, and industry trends.

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India.

Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

📌 Cybersecurity Engineer / Product Security Engineer (Bengaluru)
🏢 Match Point Solutions
📍 Bengaluru