Engineer - Cybersecurity

Eaton Group; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Eaton is looking for a Cybersecurity Engineer to join a global security team and drive Security by Design across Eaton products, solutions and services. You will lead vulnerability assessments, perform pentesting, and support threat modeling early in design phases.

You will build automation, help with certifications, and train software developers and testers in secure coding practices to strengthen Eaton’s security posture globally.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Electronics Engineering, Electrical Engineering.
• 3-4 years of relevant experience in Product cybersecurity (one-year could be waived for a Masters Degree).
• Experience with IoT, embedded systems, web/mobile apps and security testing tools.

Responsibilities

• Perform Vulnerability Assessment & Penetration Testing on Eaton products and solutions across technologies (IoT, embedded, web/mobile).
• Support Threat Modeling and Risk Assessment during design and development.
• Assist in certification/compliance efforts under standards like UL2900, IEC62443.
• Build tools, scripts and automation frameworks to scale Eaton cybersecurity impact.
• Provide security trainings to developers and testers, promoting Security by Design.
• Monitor threat landscape and drive continuous improvement in cybersecurity processes.

Skills

IoT Security

Web/API Pentesting

Cloud Security Testing

Threat Modeling

Independent Working

Embedded Systems

Azure Defender

CrowdStrike

Invicti

Education

Bachelor’s or Master’s in Computer Science / Electronics / Electrical Engineering

Tools

Nessus

Burp Suite

Defensics

Coverity

Kali Linux

Invicti

Job description

What you’ll do:

The Cybersecurity Engineer will be part of a global team of security experts driving ‘Security by Design’ philosophy in Eaton product, solutions & services.

\"

Engineer - Cybersecurity will be part of a global team of Cybersecurity experts driving ‘Security by Design’ philosophy in Eaton product and solutions.

He/she will be responsible for:

• A. Performing Vulnerability Assessment & Penetration Testing on existing and upcoming Eaton products, solutions & services spanning a wide range of technologies including IoT devices, systems & solutions, web applications, mobile applications, thick clients, wireless devices, embedded systems deployed across Eaton electrical sector businesses.
• B. Support the Threat Modeling and Risk Assessment exercises with product teams early in the design and development phase to identify applicable cybersecurity requirements across a variety of Mobility related products, systems & solutions.
• C. Support the certification OR compliance of Eaton products under schemes like UL2900, IEC62443 and other emerging standards.
• D. Building tools, scripts and automation frameworks around security to achieve Eaton-scale impact.
• E. Evangelizing and providing technical security trainings to software developers and test engineers across the organization and evangelizing the importance of cybersecurity in other functions like sales, services and product & project management.
• G. Monitoring evolving threat landscape, cybersecurity technologies, standards, frameworks and drive continuous improvement in Eaton’s cybersecurity requirements, frameworks and processes.
• H. Support Cybersecurity Project management & OpEX processes to help drive efficiencies, optimizations & continuous improvements in CCoE's various processes & engagements

\"

Qualifications:

Bachelor’s or master’s degree in Computer Science, Electronics Engineering, Electrical Engineering.

3-4 years of relevant experience in Product cybersecurity. (one-year could be waived in-lieu of a Masters Degree)

Skills:

\"The engineer should be -

• 1) Able to perform cybersecurity testing required for Eaton products with minimal guidance.
• Key Skills for this role - IoT Security, Web/API Pentesting, Cloud Infra Testing (Azure)
• 2) Able to produce detailed product assessment reports with descriptions, mitigations etc, for product teams.
• 3) Able to understand technical cybersecurity concepts in depth and be able to apply those concepts to Eaton 4roducts for cybersecurity testing.
• 5) Able to support Threat Modeling and Risk Assessment for Eaton products.
• 6) Able to work independently on these product certifications with minimal guidance.
• 7) Having hands-on experience in various Cybersecurity activities including but not limited to - Cybersecurity assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; secure coding; preferably on embedded, ISC and IoT products.
• 8) Having hands on expertise with cybersecurity tools like Nessus, Black Duck, Defensics, Nessus, Burpsuite, Coverity, Kali Linux etc.
• Specific to this role - Azure Defender, Crowdstrike, Invicti.
• 9) Having Good understanding of security protocols (HTTPS, HSTS, TLS, SSH, 802.11 security, Bluetooth, Zigbee) and IC protocols (IEC 61850, DNP3, Modbus, WirelessHART, CAN)
• 10) Having knowledge of attacks and mitigation in : Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security, Cloud security.

11) Having certifications like CEH, OSCP, AZ-900, AZ-500 is a plus.\"

\"1) Ability to work in and with diverse & multi-cultural and geographically dispersed teams

• 2) Ability to collaborate across multi-disciplinary teams (Development Teams, product management, project management)
• 3) Ability to present to various levels of engineering and business leadership globally."