Company DescriptionSecure Elements India is a product cybersecurity engineering company dedicated to securing Software-Defined Vehicles (SDVs), connected mobility, and industrial/Operational Technology (OT) systems across their entire lifecycle—from concept and design through deployment and in-life operations.

The company combines AI-driven security intelligence, embedded protection, and compliance-focused engineering tools. Its flagship platform, CRISKLE Workspace, enables Threat Analysis and Risk Assessment (TARA), vulnerability management, SBOM analysis, cybersecurity requirements engineering, functional safety alignment, and continuous risk monitoring.

Secure Elements supports automotive and industrial cybersecurity engineering aligned with ISO/SAE 21434, UNECE R155/R156, IEC 62443, EU Cyber Resilience Act (CRA), EU Machinery Regulation, and other emerging global regulations.

The company also delivers embedded Intrusion Detection and Prevention Systems (IDPS) for CAN, Automotive Ethernet, and RF, integrated with a Mobility Security Operations Centre (MSOC) for threat detection, intelligence, and response.

Based in Bengaluru (India), Coventry (UK) and collaborating with partners across Europe and Asia, Secure Elements supports OEMs, Tier-1 suppliers, industrial equipment manufacturers, and technology providers across automotive, EV/EVSE, V2X, industrial IoT, connected machinery, and cloud-connected ecosystems.

Role DescriptionWe are hiring a Product Cybersecurity Engineer / Senior Product Cybersecurity Engineer – TARA & Risk Assessment for a full-time, in office position in the Greater Bengaluru Area, with 2–8 years of relevant experience.

The role focuses on performing end-to-end cybersecurity Threat Analysis and Risk Assessment (TARA) for Windows, Linux, Android/iOS, cloud-based applications, embedded systems, and connected industrial products.

The engineer will work with structured, AI-assisted cybersecurity engineering workflows to identify assets, model threats, assess vulnerabilities and risks, evaluate security controls, and recommend mitigation measures with complete traceability.





Key responsibilities include

- Perform end-to-end TARA, covering asset identification, threat scenarios, attack paths, feasibility and impact assessment, risk determination, and risk treatment.
- Conduct STRIDE-based threat modelling, data flow analysis, trust boundary identification, attack surface analysis, and misuse-case evaluation.
- Perform vulnerability analysis using CVE/CWE databases, SBOM/SCA evidence, and threat intelligence; independently calculate and justify CVSS v3.1/v4.0 scores.
- Assess cybersecurity controls covering authentication, authorization, PKI, cryptographic key management, secure software updates, API security, cloud IAM, and device identity.
- Define cybersecurity goals, technical security requirements, mitigation strategies, and residual-risk assessments.
- Map cybersecurity risks and controls to applicable standards and regulations, including IEC 62443, ISO/SAE 21434, EU CRA, and related frameworks.
- Develop traceable TARA reports, risk registers, threat catalogues, security recommendations, and compliance evidence.
- Collaborate with cybersecurity architects, product owners, software teams, and customer stakeholders through technical workshops and design reviews.
- Support continuous cybersecurity risk assessment by incorporating emerging vulnerabilities, SBOM changes, threat intelligence, and evolving product architectures.

Qualifications
- 2–8 years of relevant experience in product cybersecurity, threat modelling, TARA, application security, embedded security, or industrial/OT cybersecurity.
- Mandatory hands-on experience with STRIDE, including threat identification, data flow diagrams, trust boundaries, and attack-path analysis.




- Mandatory experience independently determining CVSS v3.1/v4.0 scores, including exploitability metrics, impact assessment, vector selection, and scoring justification.
- Practical knowledge of cybersecurity risk assessment methodologies, including attack feasibility, impact rating, risk matrices, risk treatment, and residual-risk evaluation.
- Working knowledge of IEC 62443-4-1/4-2, EU CRA, EN 40000-1-2, ISO/SAE 21434, UNECE R155/R156, and other applicable product cybersecurity standards and regulations.
- Experience with Windows/Linux application security, embedded systems, cloud platforms, APIs, or mobile application security.
- Familiarity with MITRE ATT&CK;, CAPEC, CWE/CVE, OWASP ASVS/MASVS, NIST SSDF, and secure software development practices.
- Understanding of security architecture, cryptography, PKI, secure signing, identity and access management, and secure update mechanisms.
- Experience with cybersecurity engineering or threat-modelling tools, vulnerability management platforms, and structured risk assessment workflows.
- Strong technical documentation, analytical problem-solving, communication, and cross-functional collaboration skills.
- Bachelor's or Master's degree in Computer Science, Electronics, Information Security, Cybersecurity, or a related engineering discipline.

Preferred Qualifications

- Experience in automotive, industrial automation, OT/ICS, connected machinery, or IoT product cybersecurity.
- Knowledge of EU Machinery Regulation (EU) 2023/1230, ISO 27001, and cloud security architecture.
- Experience with AI-assisted threat modelling, automated TARA workflows, cybersecurity compliance traceability, or continuous risk assessment.
- Familiarity with security assessment tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, Burp Suite, OWASP ZAP, Wireshark, or SBOM/SCA tools.
- Relevant certifications such as CSSLP, CISSP, GICSP, ISA/IEC 62443, or equivalent.

Join Secure Elements and help engineer secure, resilient, and regulation-ready products for the future of connected mobility and industrial systems.

📌 Senior / Lead Product Cybersecurity Engineer (Bengaluru)
🏢 Secure Elements India
📍 Bengaluru