Cybersecurity Engineer

NeuBodhi; Pune District; On-site; INR 600,000 - 900,000; Full time

Job summary

NeuBodhi in Pune, India seeks a security-focused engineer to harden embedded systems, secure CI/CD, and perform PenTest in air-gapped environments.

You will implement cryptography, threat modeling, and security testing, ensuring compliance with IEC/ISO standards and OWASP practices across embedded devices, ROS 2/SROS2 security, and network fabrics.

Qualifications

• BE/B.Tech in CS/IT/E&TC or related field with 1–2 years in cybersecurity/security engineering/DevSecOps.
• Strong Linux administration and networking fundamentals (TCP/IP, VLANs, routing, firewalls, VPNs).
• Hands-on experience with Nmap, Wireshark, Burp Suite, Metasploit, Nessus/OpenVAS.
• Understanding of cryptography: PKI, digital signatures, TLS, hashing, and key management.
• Familiarity with OWASP Top 10 and threat modelling (STRIDE or similar).
• Scripting in Python and/or Bash.
• Indian nationality required; background verification may apply for defence projects.

Responsibilities

• Harden embedded and edge Linux systems with secure boot, disk encryption, access control, and kiosk lockdown.
• Secure robotic middleware and field buses, including ROS 2/SROS2, DDS security, CAN bus, and MAVLink.
• Implement tamper resistance, secure firmware updates, and hardware-bound licensing.
• Support air-gapped patch delivery with signed packages, local HSM and key management, and on-prem SIEM and logging.
• Secure datalinks between vehicles and ground stations using VPNs, firewalls, segmentation, and encryption.
• Design and audit network architectures for air-gapped and isolated deployments.
• Monitor and respond to security events using SIEM, IDS/IPS, and log analysis.
• Perform penetration testing and vulnerability analysis on wireless, RF, Wi-Fi, cellular, SATCOM, and custom SDR datalinks.
• Apply COMSEC / TRANSEC practices, anti-jamming hardening, and tactical data-link security.
• Carry out vulnerability assessments and penetration testing on web apps, APIs, dashboards, and networks.
• Secure CI/CD pipelines with code signing, dependency scanning, SAST/DAST, and secrets management.
• Protect software IP through obfuscation or compilation, signed builds, and licence management.
• Assess and mitigate AI-specific risks such as prompt injection, data leakage, model theft, and adversarial inputs.
• Prepare security documentation, threat models, and compliance evidence for customer and defence audits.
• Set internal security policies, access management, and secure development practices.

Skills

Linux administration

Networking fundamentals

Scripting (Python/Bash)

Threat modelling

Security testing

Vulnerability assessment

CI/CD security

Code signing / secrets management

Education

BE/B.Tech in CS/IT/E&TC

Tools

Nmap

Wireshark

Burp Suite

Metasploit

Nessus/OpenVAS

Job description

Secure autonomous platforms, robotics, and AI systems for defence, naval, and port customers in air-gapped and high-security environments. Cover embedded devices, communication links, software IP, on-prem infrastructure, and AI applications end to end.

Key Responsibilities

• Harden embedded and edge Linux systems with secure boot, disk encryption, access control, and kiosk lockdown
• Secure robotic middleware and field buses, including ROS 2/SROS2, DDS security, CAN bus, and MAVLink
• Implement tamper resistance, secure firmware updates, and hardware-bound licensing
• Support air-gapped patch delivery with signed packages, local HSM and key management, and on-prem SIEM and logging
• Secure datalinks between vehicles and ground stations using VPNs, firewalls, segmentation, and encryption
• Design and audit network architectures for air-gapped and isolated deployments
• Monitor and respond to security events using SIEM, IDS/IPS, and log analysis
• Perform penetration testing and vulnerability analysis on wireless, RF, Wi-Fi, cellular, SATCOM, and custom SDR datalinks
• Apply COMSEC / TRANSEC practices, anti-jamming hardening, and tactical data-link security
• Carry out vulnerability assessments and penetration testing on web apps, APIs, dashboards, and networks
• Secure CI/CD pipelines with code signing, dependency scanning, SAST/DAST, and secrets management
• Protect software IP through obfuscation or compilation, signed builds, and licence management
• Assess and mitigate AI-specific risks such as prompt injection, data leakage, model theft, and adversarial inputs
• Prepare security documentation, threat models, and compliance evidence for customer and defence audits
• Set internal security policies, access management, and secure development practices

Candidate Requirements

• B.E./B.Tech in CS, IT, E&TC, or a related field, with 1-2 years in cybersecurity, security engineering, or DevSecOps
• Strong Linux administration and networking fundamentals (TCP/IP, VLANs, routing, firewalls, VPNs)
• Hands-on experience with tools such as Nmap, Wireshark, Burp Suite, Metasploit, and Nessus/OpenVAS
• Understanding of cryptography: PKI, digital signatures, TLS, hashing, and key management
• Familiarity with the OWASP Top 10 and threat modelling (STRIDE or similar)
• Scripting in Python and/or Bash
• Indian nationality required; background verification may apply for defence projects

Good to Have

• Certifications such as CEH, OSCP, CompTIA Security+, eJPT, or CySA+
• OT/ICS, embedded, IoT, or automotive/CAN security experience
• Knowledge of standards such as IEC 62443, ISO 27001, NIST CSF, IACS UR E26/E27, or CERT-In guidelines
• Docker/Kubernetes security and cloud security (AWS/Azure)
• Awareness of AI/LLM security (OWASP LLM Top 10, MITRE ATLAS)

Knowledge Requirement

• Firewall / VPN / IDS/IPS / SIEM
• Cryptography / PKI / TLS / Code Signing
• DevSecOps / SAST / DAST / CI/CD Security