16 Oct
|
Generac Power Systems
|
Pune
16 Oct
Generac Power Systems
Pune
We are Generac, a leading energy technology company committed to powering a smarter world.
Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
Major Responsibilities
• Conduct end-to-end product security assessments for cloud services, backend systems, DevSecOps pipelines, and IoT devices against defined security requirements.
• Evaluate security controls across application, infrastructure, device, and pipeline layers to identify gaps, weaknesses, and non-conformances.
• Perform assessments aligned to IEC 62443 and internal Generac product security standards.
• Clearly document assessment scope, findings, compliance status, and overall security posture. Perform structured threat modeling for identified findings and architectural designs across cloud, device, and DevSecOps domains.
• Assess risk severity and potential impact, considering exploitability, exposure, and business context.
• Translate technical findings into explicit risk statements that engineering and product teams can act upon.
• Assess backend cloud architectures, including containerized workloads and orchestrated environments, for secure configuration, network segmentation, identity controls, and data protection. Review container security practices such as image scanning, runtime protections, and least-privilege configurations.
• Evaluate cloud logging, monitoring, and incident detection capabilities to ensure adequate security observability.
• Assess CI and CD pipelines to ensure security controls are integrated and consistently applied. Review use of SAST, DAST, SCA, and infrastructure-as-code scanning within development workflows.
• Evaluate secrets management, key handling, and signing processes used in build and release pipelines.
• Identify gaps in automation, enforcement, or visibility that could in
📌 Senior Product Security Assessor (Pune)
🏢 Generac Power Systems
📍 Pune