Embedded Cyber Security Analyst

Tata Elxsi; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Tata Elxsi in BLR is seeking an Advanced Lead Embedded Software Security to design, develop, and implement security-conscious embedded software for complex product lines. You will lead security assessments, threat modeling, and architecture decisions.

You will collaborate with cross-functional teams to embed cryptography, secure boot, and secure coding practices across Bear Metal and Embedded Linux, ensuring compliance with IEC62443 and NIST standards.

Qualifications

• 8+ years of experience in Embedded Systems with cybersecurity.
• Secure software design with security practices.
• Strong understanding of security protocols, cryptography, and secure coding.
• Experience in Bear Metal & Embedded Linux – Secure Boot, USB, Ethernet, IoT.

Responsibilities

• Carry security assessment complying to requirements on Embedded Product using Threat Model, Threat & Risk Analysis and vulnerability analysis.
• Bring up the Security Architecture and Design as per the project to mitigate threats and obtain final Cybersecurity approval for Release.
• Design and Develop the Secure Embedded software applications.
• Analyze and propose mitigations for Security scan results - SAST, DAST, SCA and FST.
• Collaborate with Development teams to integrate secure practices in product design lifecycle.

Skills

C

C++

Python

Secure software design

Cryptography

Security protocols

Threat modeling

Embedded Linux

Education

Bachelors/Masters in CS/CE/IS

Tools

GitLab

SAST/DAST/SCA tools

OWASP/IEC62443 guidance

Polaris (security scans)

Job description

Position Title: Advanced Lead Embedded Software Security

Location : BLR

Job Summary: As a Security Software Designer, you will be responsible for designing, developing, and implementing software solutions that protect systems and networks from cyber threats. You will work closely with cross-functional teams to ensure that security is integrated into every phase of the software development lifecycle.

Primary responsibilities:

1. Carry security assessment Complying to requirements on Embedded Product Using Threat Model , Threat & Risk Analysis and vulnerability analysis.

2. Bring up the Security Architecture and Design as per the Need of the project to mitigate/Remediate the threats and Get final Cybersecurity approval for Release.

3. Design and Develop the Secure Embedded software applications

4. Analyze and propose mitigation for Security scan results - SAST,DAST,SCA and FST requirements. 5. Collaborate with Development team of Different Product lines to propose and integrate the secure Practices in product design lifecycle

Qualification / Requirement:

• Bachelor’s/Master’s degree in CS/E&C/IS with Overall Working experience of 8+ Years in Embedded System with Cybersecurity
• Proven experience in Secure software design development with security practices.
• Strong understanding of security protocols, cryptography, and secure coding techniques.
• Excellent problem-solving skills and attention to detail.

Essential Requirements:

• Very strong technical knowledge on Secure Embedded system Design and Implementation in Bear Metal & Embedded Linux – Secure Boot, Serial, USB, Ethernet and IoT
• Hands experience with Programming Language C, C++ and Python
• Secure Design Patterns & Principles, Standards IEC62443, NIST 800 Standard OWSAP, CWE
• Working experience with Network Protocols, network Infrastructure and services in Embedded LinuxFirewalls, Router, Switches, VPN, HTTP, SSH, SFTP, FTP, TFTP, SNMP, DHCP, MQTT, MQTTS, NTP etc
• Cryptographic Concept - Storage of passwords, accounts, keys, Certificates use, Crypto Key Management, Key Generation and Key Usage

Desired Requirements :

• Sound Knowledge on the Network Security Protocols HTTPS, SSL,TLS
• Authentication and Authorization
• Gitlab Repository and Pipeline Concept
• Design and Development experience in FPGA,PLC,Cloud and IOT based secure systems
• Study and Propose best Security design Solution to meet the project needs
• Understand and Comply to customer proposed security Requirements and Standards
• Risk Assessment • Security Scan tools Knowledge Polaris, Blackduck etc
• Ability to perceive the system knowledge and Analyse the Threat Surface and Vector of threat
• Proficient enough to Propose and Conceptualize the Security solution based on the Technology domain