Engineer - Cybersecurity

Eaton; Hadapsar; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Eaton, a global leader in electrical components, is hiring a Cybersecurity Engineer in India to join a world-wide security team. You will perform vulnerability assessments and penetration testing on Eaton products, solutions and services across IoT devices, embedded systems, web and mobile apps, and more.

You will also support threat modeling, risk assessment, and product certifications under UL2900 and IEC62443, while building automated security tooling and delivering developer trainings.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Electronics Engineering or Electrical Engineering.
• 3–4 years of relevant experience in product cybersecurity; 1 year can be waived with a Master’s degree.
• Hands-on experience across IoT, embedded systems, web/mobile apps and security testing.

Responsibilities

• Perform vulnerability assessment and penetration testing on Eaton products, solutions, and services.
• Support threat modeling and risk assessment early in design and development.
• Assist certification/compliance under UL2900, IEC62443 and related standards.
• Build tools, scripts and automation frameworks to scale security across Eaton.
• Deliver security trainings to developers and testers and promote secure practices.
• Monitor evolving threat landscape and drive continual improvement in security requirements.
• Support Cybersecurity project management and OpEx processes for efficiency.

Skills

IoT security

Web/API pentesting

Cloud infra testing

Threat modeling

Product cybersecurity

Education

Bachelor’s or Master’s degree in Computer Science / Electronics / Electrical Engineering

Tools

Nessus

Burp Suite

Defensics

Kali Linux

Coverity

Black Duck

Invicti

Azure Defender

CrowdStrike

Job description

What you’ll do:The Cybersecurity Engineer will be part of a global team of security experts driving ‘Security by Design’ philosophy in Eaton product, solutions & services.\"Engineer - Cybersecurity will be part of a global team of Cybersecurity experts driving ‘Security by Design’ philosophy in Eaton product and solutions.He/she will be responsible for:A. Performing Vulnerability Assessment & Penetration Testing on existing and upcoming Eaton products, solutions & services spanning a wide range of technologies including IoT devices, systems & solutions, web applications, mobile applications, thick clients, wireless devices, embedded systems deployed across Eaton electrical sector businesses.B. Support the Threat Modeling and Risk Assessment exercises with product teams early in the design and development phase to identify applicable cybersecurity requirements across a variety of Mobility related products, systems & solutions.C. Support the certification OR compliance of Eaton products under schemes like UL2900, IEC62443 and other emerging standards.D. Building tools, scripts and automation frameworks around security to achieve Eaton-scale impact.E. Evangelizing and providing technical security trainings to software developers and test engineers across the organization and evangelizing the importance of cybersecurity in other functions like sales, services and product & project management.G. Monitoring evolving threat landscape, cybersecurity technologies, standards, frameworks and drive continuous improvement in Eaton’s cybersecurity requirements, frameworks and processes.H. Support Cybersecurity Project management & OpEX processes to help drive efficiencies, optimizations & continuous improvements in CCoE's various processes & engagements\"Qualifications:Bachelor’s or master’s degree in Computer Science, Electronics Engineering, Electrical Engineering.3-4 years of relevant experience in Product cybersecurity. (one-year could be waived in-lieu of a Masters Degree)Skills:\"The engineer should be -1) Able to perform cybersecurity testing required for Eaton products with minimal guidance.Key Skills for this role - IoT Security, Web/API Pentesting, Cloud Infra Testing (Azure)2) Able to produce detailed product assessment reports with descriptions, mitigations etc, for product teams.3) Able to understand technical cybersecurity concepts in depth and be able to apply those concepts to Eaton 4roducts for cybersecurity testing.5) Able to support Threat Modeling and Risk Assessment for Eaton products.6) Able to work independently on these product certifications with minimal guidance.7) Having hands-on experience in various Cybersecurity activities including but not limited to - Cybersecurity assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; secure coding; preferably on embedded, ICS and IoT products.8) Having hands on expertise with cybersecurity tools like Nessus, Black Duck, Defensics, Nessus, Burpsuite, Coverity, Kali Linux etc.Specific to this role - Azure Defender, Crowdstrike, Invicti.9) Having Good understanding of security protocols (HTTPS, HSTS, TLS, SSH, 802.11 security, Bluetooth, Zigbee) and ICS protocols (IEC 61850, DNP3, Modbus, WirelessHART, CAN)10) Having knowledge of attacks and mitigation in : Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security, Cloud security.11) Having certifications like CEH, OSCP, AZ-900, AZ-500 is a plus.\"\"1) Ability to work in and with diverse & multi-cultural and geographically dispersed teams2) Ability to collaborate across multi-disciplinary teams (Development Teams, product management, project management)3) Ability to present to various levels of engineering and business leadership globally.\"